Tab level authorization problem

Hi,
I have created an autherization schema using " exists sql query". I applied this autherization schema to a "parent tab"
say"Tab1". I am having 5 standard tabs under this parent tab(Tab1) say tab2,tab3 .... My Standard tab tab2 is
assosiated with the page 1. When the autherization schema assosiated to the parent tab(tab1) is not satisfying
then that tab is not displaying. But the standard tabs assosiated to that parent tabs are displaying. But when i click
any other parent tabs these standard tabs disappears. How can i fix this problem so that the standard tabs will not be
dispayed,
Thanks,
TJ

TJ (what's your first name?),
You don't need authorization on the parent tabs; just put it on the standard tabs and if it passes, the parent tab will show - otherwise it won't.
Scott

Similar Messages

Tab Level Authorization

One of My application I plan to give the tab level authorization. I used two level tabs.
for example, the sub tabs are like aa,bb,cc. I need to write the authorization schemes and I need to get the tab name dynamically here to show this tab for only few users. This scheme will be seleted for all the tabs.
When I try with :app_tab_id, :parent_tab_cells bind variables, it's not working properly. Any one can suggest me how can I refer the tabname or tab label (like for page we are using app_page_id)
Advance thanks for your help
Balaji

Balaji:
I don't understand why you need to know the current-tab etc.
Authorizations can be applied at the tab level declaratively (in the tab's defintion).
So, your authorization should simply be something like 'return true for user1, user2, user3...' and this authorization should be specified as the 'Authorization' for the tab's authorization.
Varad

Authorization at Folder Tab level

Hello Experts
I have design a form which has lots of folder tabs , but now i want authorization at folder tab level, so that only authorized user has access to those tab, while unauthorize user is not able to see content inside the tab
ex
user1 - Full authorization
user2 - No authorization on tab level
Is it possible
Plz suggest

Hi,
Yes u can write a small logic like that, for a specific user some folders will not be avaliable, for that i suggest u create a new UDT with some cols like user name, and folder item UID to restrict, so that the end user admin can update this table with the required folder item ID and user code as the users can change in the future,
So u can have a logic like
If loggedInUser = restrictedUser Then
msgbox("Not authorized to view this information")
bubbleevent = false
End If
U need to execute this logic in the item click event.
Hope this helps,
Vasu Natari.

Organization level authorization restrictions

Hello All,
Please can you let me know
1) f it is possible to org level authorization restrictions for CLM documents and master data without any development?
- E.g. while creating suppliers the user should only be able to create for the Company assigned to the user id?
2) What is the significance of the company and organization unit fields in the user account information page?
Regards,
Subramaniam Iyer

Hi ,
Could you share about your solution ? I think I have face the same problem as yours.

"Low-level" authorizations for accessing BW reports - add users to role

Using the advice in Topic "Low-level" authorizations for accessing BW reports, I have been able to publish a query to a role that has 3 test users and each user gets the same query but with different data, as determined in the tables.
Is there a way to look up the users and e-mail addresses from a table and associate them to the role? We have several hundred e-mail recipients that will not need BW access, but only need an e-mail with a static report that contains data on their own territories.

Hi!
i think programatically it might be complex. You got to maintain a seperate variant of report per user and use this variant to send mail. that means you need to maintain a variant and a Broadcast setting per user. once maintained you can use it any number of times the values will be recalculated everytime.
with regards
ashwin
<i>PS n: Assigning point to the helpful answers is the way of saying thanks in SDN. you can assign points by clicking on the appropriate radio button displayed next to the answers for your question. yellow for 2, green for 6 points(2)and blue for 10 points and to close the question and marked as problem solved. closing the threads which has a solution will help the members to deal with open issues with out wasting time on problems which has a solution and also to the people who encounter the same porblem in future. This is just to give you information as you are a new user.</i>

How I fixed my authorization problem

There have been many posts on the authorization problem that has cropped up since the latest update of iTunes, and there doesn't seem to be universal cure. I fought it myself for a couple of weeks, and recently fixed it on my PowerBook and thought I would share it with others.
The common theme here seems to be that it affects people who have had more than one account in iTunes. For the record, I have NEVER purchased music from the iTMS using a different account, so I was confused as to why this was happening to me.
I have two Macs in play here: an older eMac at home and a PowerBook G4. My initial iTunes library started on the eMac, and then I moved it to my PowerBook a little over a year ago when I bought it. I purchased music from the iTMS on both Macs, using the exact same account.
When I upgraded iTunes on my PowerBook, I reauthorized using my only account, and the music that I had purchased since I transfered my library worked just fine. The music that I had purchased on my eMac simply would not authorize!
It dawned on me yesterday that I setup a .mac account on my PowerBook several months ago, although I never used it in the iTMS and I never used it on the eMac at home. I also realized that I had NOT run iTunes on the eMac since the most recent upgrade.
I installed the iTunes upgrade on my eMac, and proceeded to authorize it with my only known iTMS account. No issues, and all purchased music was auhtorized, including songs that would not play on my PowerBook.
On my PowerBook, I decided to authorize using my .mac username and password, even though I have NEVER used it to purchase music. I didn't even own that account when the music files in question were purchased. As I suspected though, the authorization went through and I can now play all of my purchased music from iTMS.
When I try to step through this logically, it makes my head hurt. There is definitely a major problem with Apple's DRM authorization relationship somewhere, as there should be no reason at ALL for any of my music to require my .mac account.
I don't know if this will help anyone, but if you're struggling with it and you have a .mac account, give it a shot and it might work.

The fact that you saw no glitches while running Logic before applying the update means almost nothing because that uses only a small subset of system resources. Far more significant is that Safe Mode restored some missing functionality: because it disables non-essential items like user fonts, third party drivers, & so on, it points to problems in those areas.
Equally significant, the fact that there are relatively few reports of post-update problems among the several million Snow Leopard users points away from the update itself as the cause of your problems.
Separate & apart from that, it so happens that I'm a sound engineer/system designer/board operator with nearly 40 years of professional touring experience. FWIW, I never have & never will update the software of any system I must rely on professionally (whether it is running on a Mac, a PC, or dedicated hardware) unless & until I can thoroughly test it first and I have a trustworthy backup/recursion strategy to fall back on in case of problems.
I strongly suggest you learn from your unpleasant experience & do the same. I have had far fewer problems with Macs than with PC's, but nothing is 100% reliable to begin with. Changing the OS software part way through the tour is just asking for trouble, no matter how reliable that has been in the past. Even if the budget allows for nothing better than a stack of burned CD's & a couple of consumer grade CD players, no professional tour can afford to be without some fallback strategy in place. That should be self-evident & require no warning from Apple or anybody else.

BW Authorizations Problem

Hi,
BW ver: 3.5
During some testing, a BW consultant created some custom authorization objects based on InfoObject 0Employee. These custom authorization objects were added to roles. Now that we are developing proper roles, these custom objects are not required any more. But when I try to go to RSSM and delete the objects, this is the message I get,
<b>
You can not remove any InfoObjects from the definition of the authorization object nor add any, since otherwise the higher-level authorizations and profiles can no longer be interpreted by the system. You can, however, still change for each InfoCube whether this authorization object should be checked.
If you really want to change the authorization object, you have to first delete the corresponding profiles from the user master records and then the profile and authorizations for this authorization object. Using the where-used list in the initial screen, you can determine which users, profiles and authorizations are affected.
</b>
When I search the where-used list, I can see that this custom object is in use in some profiles. And one of those profiles is SAP_ALL (which is generated automatically). The rest are custom profiles.
So how can I clean up the system from these unwanted custom authorization objects? My understanding is:
1. Create a user with system administration authorization, but without SAP_ALL. Logon with this user.
2. Remove SAP_ALL and other profiles from all users containing the affected profiles
3. Delete the custom authorization object
Is this the correct approach? Is there a better way of handling this?
Thanks and regards
Message was edited by:
Shehryar Khan

Followed the same approach as mentioned above. Adjusting SAP_ALL was the most tricky. I used RSSM, SU02 and SU03 to adjust all authorizations.
Regards

Authorization problem when using the Transaction Launcher

Hi All,
We have an authorization problem when we call a transaction (EL37) in ECC from the IC Web Client.
We believe that we have done all the necessary customizing in CRM and when we press the link in the Navigation Bar we are asked to logon to our ECC system. After logging on, we get an error message saying that "You do not have authorization for transaction EL37". If I then enter the transaction directly in the white command field in top of the ECC screen, then I have no problem calling the transaction.
My user has SAP_ALL, so it shouldn't be a problem with the authorizations. Maybe it has something to do with the transaction IC_LTXE? I have also tried to add this transaction to my user profile, but that didn't help.
Does anyone have a suggestion for how to fix this problem?
Kind Regards,
Gitte.

Hi,
I have found the solution for the problem myself. The transation code in the Transation Launcher Wizard must be written in capitals! We had entered 'el37' and have now changed it to 'EL37'.
Best Regards,
Gitte.

How to deal authorization problem in KE30

Hi to all
Please tell me how to deal authorization problem in KE30.
My requirement is to restrict report based on sales office so that other region's emplyee can't be able to see different regions sales data.
Please guide me on this issue.
Thanks & Regards
Anubhav

closed.

ATV2 "authorization" problem

So, I purchased an ATV2 at Heathrpw airport before I left UK as well as a cheap (£14.95) HDMI cable.
I wanted to use the ATV2 in my home in Switzerland and purchased a Sony Bravia TV to watch it on.
1. My first problem, when streaming content from my iTunes is that the ATV2 sometimes gets "disconnected" from the television, i.e. I see the blnk HDMI1 screen for a split second, then it reconnects.
2. Second problem is that after about 15 minutes of watching anything on my ATV2, the picture turns to a combination of pink and blue, the picture is still visible but i have never seens anything like this.
3. third and most annoying problem: I rented a movie directly from ATV2 last night (with my UK iTunes account), paid for it, and when it pops up on the screen saying it is ready to be watched, I pressed play but it loads, then authorizes and then a message appears that "this device is not authorized to play this content".
I thought that perhaps this was one movie, so I rented a second one. When that didnt work, I figured it may be because I am in Switzerland and using a UK iTunes account, so I logged into my swiss one and rented something else. To no avail!
*Things I have done to try and fix the problems*
1. I have authorized and de-authorized my computer
2. I have reset the ATV2 to its factory settings
3. I have tried Swiss as well as UK iTunes accounts to rent movies
This is increedibly frustrating and I hope someone can help! Thank you in advance!

I too got an ATV 2 very recently. From my iMac I can order movies and watch them (as well as music, etc.). From my MacBook Pro I can do all except stream movies. Every time I try something new on the MacBook Pro (I keep buying the same two movies, so "they" know I am sincere), I get authorization problems.
1. REMOTE: I can preview but not watch ATV 2 movies using the remote: "your apple tv is not authorized to play this content."
2. MACBOOK PRO: I cannot use my macbook pro itunes to order and watch movies (music yes, movies no): "Authorization is required..." even though I have authorized/reauthorized the laptop 10 times. And I have reset/restored ATV 2.
3. IMAC: I can use my iMac itunes to order movies. I then choose that computer on the ATV 2 screen and movies stream.

Tabbed selection screen problem.

Hi expert,
I need some help in creating my selection screen.
Right now i'm creating a tabbed selection screen as the code below follows.
PARAMETERS: p_test AS CHECKBOX USER-COMMAND testrun DEFAULT 'X'.
SELECTION-SCREEN BEGIN OF SCREEN 100 AS SUBSCREEN.
PARAMETERS: p_offkdt TYPE sy-datum MODIF ID thr.
SELECT-OPTIONS: s_konfe FOR p0002-konfe.
SELECTION-SCREEN END OF SCREEN 100.
SELECTION-SCREEN BEGIN OF SCREEN 200 AS SUBSCREEN.
SELECTION-SCREEN: BEGIN OF LINE,
                   COMMENT 1(20) text-005 MODIF ID yea
                    FOR FIELD p_lowdt,
                    POSITION POS_LOW.
PARAMETERS: p_lowdt TYPE begda MODIF ID yea,
            p_updt TYPE endda MODIF ID yea.
SELECTION-SCREEN: END OF LINE.
PARAMETERS: p_keydt TYPE dats MODIF ID yea.
SELECTION-SCREEN END OF SCREEN 200.
SELECTION-SCREEN BEGIN OF SCREEN 300 AS SUBSCREEN.
PARAMETERS: p_lvdat TYPE dats MODIF ID lv.
SELECTION-SCREEN END OF SCREEN 300.
SELECTION-SCREEN: BEGIN OF TABBED BLOCK prog_selection FOR 4 LINES,
                  TAB (20) button1 USER-COMMAND push1,
                  TAB (20) button2 USER-COMMAND push2,
                  TAB (20) button3 USER-COMMAND push3,
                  END OF BLOCK prog_selection.
Now as I'm using tab and subscreen, therefore i need to initialize the subscreen which i wanted to use which i did in the initialization event.
prog_selection-dynnr = 100.
prog_selection-activetab = 'PUSH1'.
With the above code, my default tab would be screen 100 which is the first tab.
My problem right now is, after i execute the program, and then i press the back button to go back to the selection screen, the default tab 100 is shown again while i wanted to show the last tab which was picked before the program was executed. Please kindly advise how can i solve this problem.
Many Thanks!
-Suwardi Nursalim-

Hi,
DATA: V_DYNNR TYPE SY-DYNNR VALUE '0100',
           V_ACTIVETAB(4).
INITIALIZATION.
MOVE 'PUSH1' TO V_ACTIVETAB.
AT SELECTION-SCREEN OUTPUT.
prog_selection-dynnr = V_DYNNR.
prog_selection-activetab = V_ACTIVETAB.
When the user clicks each tab of the tab strip.*
CASE SY-UCOMM.
   WHEN 'PUSH1'.
        V_ACTIVETAB = 'PUSH1'.
        (rest of your code).
   WHEN 'PUSH2'.
        V_ACTIVETAB = 'PUSH2'.
        (rest of your code).
   WHEN 'PUSH3'.
        V_ACTIVETAB = 'PUSH3'.
        (rest of your code).
ENDCASE.
Hope this will help you.
Regards,
Smart Varghese

Direct database data access without data level authorization check

Hello,
My customer raised issue about direct database data access. Due to the customeru2019s strong security policy, it shouldnu2019t be allowed.
To prevent this kind of illegal data access, customer ask me to list up all the possibilities to display data without data level authorization check.
The things in my mind are
SQL Command Editor (for Oracle based system) : ORASPACE, DB02, ST04
Query Based : SQVI (Quick Viewer), SQ01/SQ02/SQ03 (SAP Query)
Data Browser : SE11, SE12, SE16, SE16N, SE17
Table Maintenance : SM30
Function Module : RFC_READ_TABLE
Function Module : DB_EXECUTE_SQL (DML)
Anyone knows anything which is not listed above?
Thanks

HI,
Generally in production user's should not be given all these authorizations.
Ram.

Extended Notification authorization problem

Hi All,
We configured extended notification for all the workflow in ECC 6.0.
We have been moved to production system. When users selecting the workitem link in the outlook, they are getting an authorization problem saying that 'You don't have an authorization to execute SWNWIEX'.
However, with this transaction the user can execute the ANY workitem just by entering the Work item id. The transaction does not check if the work item is actually in the users inbox, I would think this could be a security issue.
could you anyone please help me out.
-Steve

Hello,
I don't think giving access to tx SWNWIEX allows all users access to all workitems.
Where did you read that? It could be the case for your account, but not everybody's.
Test it out.
regards
Rick Bakker
Hanabi Technology

BI Authorization problem query in web

Hello Guru,
i have authorization problems to execute query on the Web.
When i try to execute query on web i have these messages:
- Missing display authorization msg R9 108
- Missing authorization to execute query msg R9 108
- User doesn't have authorization for selected component
Component selected can not be executed
Contact person responsible for the authorizations if user need authorization to execute this component
Function is checked with object "Business explorer - components" with these fields:
    - InfoCube ZSD_007
    - Component type ERP
    - Component ZTEST_SD_007
    - Activity 16
Message number BRAIN 800
In BI i have add to my usere all these profiles and role, but the problem still again:
Profiles:
SAP_ALL
S_A.SYSTEM               System administrator (Superuser)
S_RS_ADMWB_A        All Administrator Workbench Authorizations
S_RS_EXPL_A             All Business Explorer Authorizations
T-BS590005                  Profile for role Z_RS_RREPU
T-BS590006                  Profile for role Z_RS_RREDE
Roles:
SAP_BW_CFO_ADMIN
Z_RS_RREDE   (copy from template RS_RREDE)
Z_RS_RREPU   (copy from template RS_RREPU)
I can not understand if this problem is related to BI authorization or maybe something in Netweaver
please help me
Kind regards
Boris

Hello,
i can execute query from transaction RSRT, anyway also from this transaction when select "ABAP WEB" , web page is open but i have same authorizations problem.
In transaction SU53 seems everithing correct (i have all authorizations) .... this is probably becouse my problem is in Portal or netweaver side and not in BI ???
any suggestion?
Thanks in advance
Boris

Tab Level Security

Hi
I have a question around Tab level security.
We are deploying a Portal to 4 different parts of the organisation. Depending on which group the user is assigned will determine which Tab they are able to view. At present I am able to use the group to which the user is set up to allow them to view the correct tab. However I now need to only provide access to these tabs for certain users with a particular role/responsibility. So first the tab will only be available to users in Group A but I also now need to prevent some users in Group A without a particular role.
Do I need to create a new group for all persons in Group A with the correct Responsibility or is there another way of doing this. For example on assigning them to Group A and then interrogate this Responsibility when they click on the Tab.
I hope this makes sense ?
Regards
Kevin

Just off the top of my head, can you create another discrete group of the Group A users who need access to the other tab, and then give that group view rights? Haven't played with it myself, but we use a similar strategy for other items.

Tab level authorization problem

Similar Messages

Maybe you are looking for