Table access restriction to certain users

Hi,
How to restrict the particular user in accessing the database tables ?
For example: A user should not be given the the rights to access the table AUFK.
Thanks in advance.
Regards,
Harsha

Hi,
If you are talking about access of table through SM30, it can be done by authorization object concept. You can assign the appropriate authrization object while creating the table maintenance. Basis will assign the roles to the user. If it is SE16/SE16N then you need to create parameter transactions for each table user is allowed to view.
Other generic option is, You can develop a report program and display the tables allowed for the user. On clicking the table name, you can take to SE16 screen. (You may need to create a transaction variant for se16/se16n for disabling the table name input field to control the user not to access other tables). Tables allowed for the user can be maintained in a Ztable.
Thanks,
Vinod.

Similar Messages

User Access restriction for certain infotype

Hi,
We have a requirement from our management that for some specific user we need to give all infotype view access I mean PA20 but excluding payroll data for 14 grade and above.
For this requirement I cannot give grade wise authorization because as per the requirement they can view all the hr related infotype except grade 14 and above our user should not view any payroll related infotype but less than 14 they can view the same.
For this I need to create one object and give it to them but I donu2019t how to find it out?
Can any one guide me?
Thanks
Gudia

Hi,
You can create dynamic action for IT 0008 that will copy grade value to field org.key in IT 0001.
This field can be used in authorization object P_ORGIN.
Then you can specify 2 P_ORGIN objects in the user role:
1. IT - all
Org.key 1-13
2. IT - non-payroll
Ogr.key 14 and above.
Cheers!

Document Universe Overloads/Access Restrictions

Is there a good way to document universe overloads/access restrictions? I can't seem to find anything. We have a ton of universe objects which are restricted for certain users/groups, and we need to re-work this list. Ideally, I'd love to have these listed out by restriction name - restricted object, or restriction name - row-level restriction.
Any help is much appreciated!

Hi Kunal,
Yep, that's exactly what I did. The query I used was:
Select SI_NAME, SI_OBJECTS
from CI_APPOBJECTS
where SI_KIND like '%OVERLOAD%' and SI_PARENT_CUID = '<universe ID>'
This worked fairly well, but it would be great if SAP would give us an ability to output these queries to Excel to make them more manageable.
Thanks!
Bill

Structural Access Restriction

G'day all.
I am wondering what are options available in SAP if we'd like to put additional user restriction base on organisation structure. I know the structural authorization but if we don't have HR module, what sort of options available in the standard SAP system?
Thanks

sandy,
What is stuctural access restriction?
Additional user restriction in SAP system like (SRM, CRM...
You can restrict users on personnel number ( I know you dont have HR installed)
Indirect role concept
Position based secureity
all deal with org struture.
In Ecc you can go with role base security or enabler concept
In SRM : we restrict user on org struture & even in CRM also .(for more information search for documents).
Thanks,
Sri

Restrict Access to certain users based on if a variable in the SQL database is set to 1

Hey guys,
I am quite new to PHP and MySQL and I have a question concerning access restriction. For a website project I am experimenting with Dreamweaver's login and restrict access behavior, which works fine. However, on the website I would like to restrict access for users that only have a 1 set in the corresponding MySQL database (which means that e.g. each page has a different variable in the database that can be set to 1, which would allow me to personify access beyond the level of the out-of-the box option, where each user can only have one access level). So it is quite similiar to the out-of-the-box restrict access to page based on user group, but just depending on another variable in the database.
I guess it can be done with an if condition that checks in the database if the logged in user has a 1 in this variable, and if yes give her/him access if not redirect to another page. However, I could not figure out how to implement that.
Your help is highly appreciated!
Thanks in advance!

Hello guys,
I spend quite some time on the internet reseaching my wish and redefined my need: I would basically like to have the possibility to assign a user multiple access levels. There would be e.g. 10 pages for each I create an access level. Then a user with e.g. access to pages 2 and 8 can only access these two pages. So my basic question is if and if yes how I can assign a user muliple access levels at a time and store these values in the MySQL database.
Thanks a lot for your help!!

Setting up a Role to Restrict SQVI by user (on field BUKRS table KNC3)

Hi Everyone!
I am trying to get my basis team to give me access to SQVI - but they want to restrict the financial data I have access to by company code (9000 in our company). The authorisation checking for SQVI is not straightforward apparently. It depends on the data source of the view created. If it is logical database, then the authorisation follows the access required for the database (e.g. system will check for vendor access if data source is the logical database Vendor Database). But if the source is table or table join, then system will check for table access right, which, in our environment, is unristricted.
So, in essensce, we do not restrict access rights by table and I will be using SQVI to directly query many tables... which will include tables that store data other than info relating to my company code
I have tried applying a role in our Q&A, where in Authorizations (change authorization data) I pass in a variable on the field and table (field name BUKRS '9000' - master table KNC3) for a role assigned to a test user (zSQVI) but this is not restricting the data I can access via SQVI when logged in as zSQVI.
Has anyone had this problem before? Does anyone know how to restrict SQVI access by a field variable using roles?
Kind Regards,
Gavin

It's not possible to restrict SQVI to this level as it doesn't contain authorisation checks at the organisational level. You can achieve this by using Infoset Query / Ad-hoc query where you have the option to apply your own code to the query, thus allowing you to check the company code.

How to provide access to v$tables in oracle 10g to user

Hi,
can any one suggest me how to provide access to v$tables in oracle 10g to user .
its requried for auditor.
PLease help me.
regards

user12009184 wrote:
HI have to provide access to all V$ tables
it required for configuration of new tool.
ThanksYou can grant it the select catalog role to the user. It should provide all the required access to the general v$* & dba_* views.
GRANT SELECT_CATALOG_ROLE TO USER;
Let me know if this helps.
Regards,
Rizwan

Schedule Portal Users Access Restriction

Hi All,
I have a scenario where in I need to restrict the access of some specific user(s)/Groups to the portal during a specific time period daily. This has to be automated and scheduled accordingly. I dont want to either delete the users or specifiy user expiry date. Please suggest if any one of you have a solution or suggestion regarding this.
Regards,
Sreeram

What are you using for your LDAP?
I do not see a way to do it via portals but with me in MSADS I can restrict days and time from there.

Restrict password resets to certain user groups in UME

I am investigating if it is possible to create a UME action which restricts admins to unlocking/locking IDs and resetting passwords for users in a certain user group. I know you may need to create a UME permission class and action. Has anyone done this? If so how?
Thanks and Regards,
Mosi

Hi Mosi,
did you have a look at the <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/2b/306bb5bc98f24f8a85d489449af456/frameset.htm">Documentation about the Company Concept</a>? This can also be used to delegate administrative taks in your case.
Regards,
Patrick

You do not have access to any End User Layer tables

Hello Guru's!
I'm having an issue with connecting/using EULs on Disco 10g - I have already installed 10g Admin and configured 2 EULs and also imported the sample data - they are all owned by DISCO user -
When I connect to http://discoserver:7778/discoverer/viewer, I get a connection screen - no connections are listed, so I click create connection - I give it a name, put in disco as my user, put my password in, put db_connect_string into the appropriate field, where db_connect_string is my actual connect string - and it gives me this error:
Error
Authentication Failed.
(You do not have access to any End User Layer tables)
I have access to these, as I'm the EUL owner - I've also tried this tho with other users that I have granted access to in the admin too (I've even granted access to these EULs to public - still no luck) - should I be using the db user and password or are there other places in 10g that I set up disco users?
If I should be using the db user and pass, why won't it see my EULs?

Hopefully CupJr got his answer as it's been over 2 years!
However, if you're having the same problem ...
1. is this an Apps EUL and you're connecting as a database user (ie: the owner of the EUL)?
2. have you set the gateway connection info correctly (again if an Apps EUL)? - found at: Tools -> Options -> Connection.
Russ

ACS User Group Network Access Restrictions

Hi to all,
We have a problem trying to restrict the access for users to an acces point: All users in any group can access the access point, although the group has a network restriction whichs restricts this access.
We have other restrictions which work perfectly. So we are beginning to think that this must be a problem in the access point (Cisco Aironet 1100)...
Thanks in advance,
Coloma Crespí

Hi Andrew,
Thanks a lot for your reply. I was really worried about this problem, I had tried everything to solve it and anything worked...
Regarding what you say, the network access restrictions we have created are the generic ones. I don´t have the option to choose between a dialup or telnet restriction. Where is it? Can you give more detailed information, please?
Thanks in advance,
Coloma Crespí

Unable to connect End user layer /You do not have access to any end user Layer tables

I get the following error message in Disco Admin ver 4.1.33.1.6 :
1)Unable to connect End user layer
In disco plus I get the follg error:
a)You do not have access to any end user Layer tables
This is despite the fact that my userid/passsword combination@databaseid has acess to all tables in Oracle sqlplus SQL*Plus: Release 8.0.6.0.0 -
Connected to:
Oracle8i Enterprise Edition Release 8.1.7.1.0 - 64bit Production
With the Partitioning option
JServer Release 8.1.7.1.0 - 64bit Production
Please reply ASAP if anyone has any ideas
Thanks
Gurman
null

Have u created a EUL for your user through Administration Edition.
If not login as a user who has DBA rights and create EUL for your user.
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Gurman Sandhu ([email protected]):
I get the following error message in Disco Admin ver 4.1.33.1.6 :
1)Unable to connect End user layer
In disco plus I get the follg error:
a)You do not have access to any end user Layer tables
This is despite the fact that my userid/passsword combination@databaseid has acess to all tables in Oracle sqlplus SQL*Plus: Release 8.0.6.0.0 -
Connected to:
Oracle8i Enterprise Edition Release 8.1.7.1.0 - 64bit Production
With the Partitioning option
JServer Release 8.1.7.1.0 - 64bit Production
Please reply ASAP if anyone has any ideas
Thanks
Gurman
<HR></BLOCKQUOTE>
null

You don't have access to any End User Layer table

Hi
When I created a EUL using Discoverer admin, and also created a business area successfully, then I can't logon using same username in Discoverer desktop, My Discoverer version is 4.1.37. when I logon, I received error message read: You don't have access to any End User Layer table.
Could someone please give me some instruction, or guide me to do something.
.

Hi Prathima
You should not be able to connect to an Apps mode EUL as an end user in the end user tools.
As for administration, you need to log in as the owner of the EUL, a database user, and then assign admin rights to an Apps account. Many companies use the SYSADMIN Apps account for this purpose. After you have assigned an Apps user to have admin rights don't forget to grant that user admin privileges over each of your business areas.,
With this done you should then manage your Discoverer administration using the Apps account.
Page 14 to 20 of the document called Setting up an Apps mode EUL may help. This document is available for free from my website here: http://ascbi.com/downloads/downloads.htm
Best wishes
Michael

How does SSHR EmployeeSS restrict access to just the user?

Hello
I am trying to establish how EmployeeSS restricts access to just the user account.
Does it use securing attributes ICX_HR_PERSON_ID or TO_PERSON_ID at all?
Thanking you in advance for any replies which will be posted to this thread.
Vicky

Hi,
yeah the system uses the securing attributes to decide on what security permissions to attach from a responsibility perpective. But one can also enfore the HR Security profiles to add further more constraints.

Access to some UDFs authorised for certain user

Dear All,
This issue made me confusing, it is about UDF access authorisation. Is it possible to authorise a certain user to open or view UDF ?For example : I have 5 UDFs that only can be used by sales dept user and 5 UDF's are for purchasing dept. How to authorized the UDFs according to its dept ? Thanks in advance.
Rgds,

Hi All,
I managed to resolve this problem by using additional authorisation creator that using form ID 38 and then in the general authorisation --> user authorisation is set to no. if it is authorised per user name, the user will not able to open UDF settings (CtrlShiftB) except there is the same level with him/her that can open the document, I think the settings can be opened. I almost escalated this problem to SAP support.
Tks for your all participations. More power to you...
Rgds,

Table access restriction to certain users

Similar Messages

Maybe you are looking for