Transaction authorization based on document status
Hi,
We need to give display only access to end users (i.e specific business roles) based on the status of the document, for e.g. if document status is IN PROCESS the end user should only be allowed to Display the document - how can this be achieved ? Helpful inputs asap plz. Thank you.
Best Regards.
Hi Robert,
Thanks for the quick reply, I will go through the said changes and update the thread accordingly in a day or two. Thanks again.
Best Regards.
Still waiting to test the solution, will update the thread soon !
Regards.
Edited by: Jacob Raj on May 2, 2011 2:02 PM
Similar Messages
-
Authorization control for document status
Dear All,
I want to control the status change of Documets created,
How can i achieve this, so that a perticular user /ID can change the perticular status,
I have ,
01
02,
03,
04, Rel.
05,
Do i need to put some trace anf find Objects to control...
or there is any standard method to do this..
Please guide me..
Regards
RaghuHi Raghu,
Here are DMS authorizatoins objects. For handle status it should be C_DRAW_STA
C_DRAD_OBJ Create/Change/Display/Delete Object Link
C_DRAW_BGR Authorization for authorization groups
C_DRAW_DOK Authorization for document access
C_DRAW_MUP Authorization for Markups
C_DRAW_STA Authorization for document status
C_DRAW_TCD Authorization for document activities
C_DRAW_TCS Status-Dependent Authorizations for Documents
C_DRZA_TCD Document Distribution: Authorization for Recipient Lists
C_DRZI_TCD Document Distribution: Authorization for Distribution Order
S_ECL_CAT ECL Viewer: Authorization Object for Stamp Categories
S_ECL_STP ECL Viewer: Authorization Object for Printing with Meta Data
S_ECL_STP2 ECL Viewer: Authorization Object for Printing with Meta Data
Hope that it will help you
//Håkan -
Business Transaction control based on equipment status
I have created status profile for equipment creation . One of the user status is "Created by User" . Now If the user status of the equipment is this , I want to disallow notification creation through iw21 on this equipment .
Please explain in detail how to achieve this through transaction control in status profile (I have already tried object type "maintainence notif " etc in status profile ....but did not find transaction create notification which has to be forbidden .)..
Also please explain how to view transaction code along with business transaction in transaction control screen ..(any alternate way ?)
NPBhi
kindly specify the object type as Equipment and check
I am not sure, kindly mark the Create Log Notification as forbidden for the user status
regards
thyagarajan -
Restrict the user based on document type on migo transaction-prepare GRN
Hi,
We are running ECC6.0 R/3 system.We had a requirement as follows
In MIGO transaction , we want to restrict the user on document type i.e. we want that a particular user can prepare GRN for document type STO only. He cannot prepare GRN for other document type.
We checked SU24->maintain check indicators for transaction codes->enter migo->execute->check indicator.This returned us the authorisation objects present in Migo transaction.We checked the help of all these objects,but none of them we found suitable for above mentioned requirement.We were planning to find out the proper authorisation object to add to Profile generater.
The following is the objects which we have checked for.
A_B_ANLKL--> Asset Postings: Company Code/Asset Class
A_B_BWART--> Asset Postings: Asset Class/Transaction Type
B_USERSTAT--> Status Management: Set/Delete User Status
B_USERST_T--> Status Management: Set/Delete User Status using Process
C_AFKO_AWK--> CIM: Plant for order type of order
C_CACL_DSG--> Interface Design
C_DRAW_BGR--> Authorization for authorization groups
C_DRAW_DOK--> Authorization for document access
C_DRAW_TCD--> Authorization for document activities
C_DRAW_TCS--> Status-Dependent Authorizations for Documents
C_KLAH_BKP--> Authorization for Class Maintenance
C_STUE_BER--> CS BOM Authorizations
C_STUE_WRK--> CS BOM Plant (Plant Assignments)
C_TCLA_BKA--> Authorization for Class Types
C_TCLS_BER--> Authorization for Org. Areas in Classification System
C_TCLS_MNT--> Authorization for Characteristics of Org. Area
F_BKPF_BUK--> Accounting Document: Authorization for Company Codes
F_BKPF_BUP--> Accounting Document: Authorization for Posting Periods
F_BKPF_KOA--> Accounting Document: Authorization for Account Types
F_FICA_FOG--> Funds Management: authorization group of fund
F_FICA_FSG--> Funds Management: authorization group for the funds center
F_FICB_FKR--> Cash Budget Management/Funds Management FM Area
F_KNA1_APP--> Customer: Application Authorization
F_LFA1_APP--> Vendor: Application Authorization
F_SKA1_BUK--> G/L Account: Authorization for Company Codes
G_GLTP --> Spec. Purpose Ledger Database (Ledger, Record Type,
Version)
J_1IDEP_SL--> Authorization object for depot sale transaction
J_1IEXC_OT--> Authorization object for Other Excise Invoice Create
J_1IEX_PST--> Autorization object for posting Other Excise invoice
J_1IGRPT1--> Auth. for PART1 at GR
J_1IINEX --> Incoming Excise Invoice
J_1IRG23D--> Authorisation object for Depo Transactions
K_CCA--> CO-CCA: Gen. Authorization Object for Cost Center
Accounting
K_CSKS --> CO-CCA: Cost Center Master
K_CSKS_SET--> CO-CCA: Cost Center Groups
K_PCA--> EC-PCA: Responsibility Area, Profit Center
L_TCODE--> Transaction Codes in the Warehouse Management System
M_ANFR_BSA--> Document Type in RFQ
M_ANFR_EKG--> Purchasing Group in RFQ
M_ANFR_EKO--> Purchasing Organization in RFQ
M_ANFR_WRK--> Plant in RFQ
M_BEST_BSA--> Document Type in Purchase Order
M_BEST_EKG--> Purchasing Group in Purchase Order
M_BEST_EKO--> Purchasing Organization in Purchase Order
M_BEST_WRK--> Plant in Purchase Order
M_MATE_CHG--> Material Master: Batches/Trading Units
M_MATE_STA--> Material Master: Maintenance Statuses
M_MATE_WRK--> Material Master: Plants
M_MRES_BWA--> Reservations: Movement Type
M_MRES_WWA--> Reservations: Plant
M_MSEG_BMB -->Material Documents: Movement Type
M_MSEG_BWA--> Goods Movements: Movement Type
M_MSEG_BWE--> Goods Receipt for Purchase Order: Movement Type
M_MSEG_BWF--> Goods Receipt for Production Order: Movement Type
M_MSEG_LGO--> Goods Movements: Storage Location
M_MSEG_WMB--> Material Documents: Plant
M_MSEG_WWA--> Goods Movements: Plant
M_MSEG_WWE--> Goods Receipt for Purchase Order: Plant
M_MSEG_WWF--> Goods Receipt for Production Order: Plant
M_RAHM_BSA--> Document Type in Outline Agreement
M_RAHM_EKG--> Purchasing Group in Outline Agreement
M_RAHM_EKO--> Purchasing Organization in Outline Agreement
M_RAHM_WRK--> Plant in Outline Agreement
Q_TCODE QM --> Transaction Authorization
S_ADMI_FCD--> System Authorizations
S_ALV_LAYO--> ALV Standard Layout
S_BDS_DS--> BC-SRV-KPR-BDS: Authorizations for Document Set
S_BTCH_ADM--> Background Processing: Background Administrator
S_BTCH_JOB--> Background Processing: Operations on Background Jobs
S_CTS_ADMI--> Administration Functions in Change and Transport System
S_DATASET--> Authorization for file access
S_DEVELOP--> ABAP Workbench
S_DOKU_AUT--> SE61 Documentation Maintenance Authorization
S_GUI--> Authorization for GUI activities
S_OC_DOC--> SAPoffice: Authorization for an Activity with Documents
S_OC_ROLE--> SAPoffice: Office User Attribute
S_OC_SEND--> Authorization Object for Sending
S_PACKSTRU--> Internal SAP Use: Package Structure
S_PRO_AUTH--> IMG: New authorizations for projects
S_RFC--> Authorization Check for RFC Access
S_SCD0 --> Change documents
S_SPO_DEV--> Spool: Device authorizations
S_TABU_DIS--> Table Maintenance (via standard tools such as SM30)
S_TCODE --> Transaction Code Check at Transaction Start
S_TRANSLAT--> Translation environment authorization object
S_TRANSPRT--> Transport Organizer
S_WFAR_OBJ--> ArchiveLink: Authorizations for access to documents
V_LIKP_VST-->Delivery: Authorization for Shipping Points
V_VBAK_AAT-->Sales Document: Authorization for Sales Document Types
V_VBAK_VKO-->Sales Document: Authorization for Sales AreasHave you executed a trace while a functional user executes the transaction code for the specific parameters? (i.e. document type). The trace will then show which objects are being checked; then look at the object documentation in txn Su21 to determine if there are any ways to restrict on the particular value; in some cases, if the authorization group field is being checked, additional configuration is needed in order to implement the security (Su21 will explain in detail for the particular object).
-
Can I Control Follow Up Transactions based on the Status ?
Hi,
I have created follow-up transaction (Quote) for main transaction Opportunity (this is custom defined transaction). I am able to create the follow-up transaction alright. However, now I would want to restrict the creation of follow up transaction based on the status of Opportunity. E.g if the Opportunity status is "Open" then I should not be able to create the follow-up transaction, wheras if the Opportunity status is "Won" then I should be able to create the follow-up transaction.
Any help will be highly appreciated.
Regards,
DiptenduWrite this restricting condition in COPY or OPPORT_H method of CRM_COPY_BADI. Raise an error message when status is not as desired which will stop the creation of follow up document. Do not forget to filter for transaction type i.e. process type. Also to make it exclusive for creation of follow up document (not code for copy control also), put some other condition checking docflow or something.
-
Document Status -- Authorization group?
Hi,
I defined new status values for document in the IMG SolMan project. In addition, i created the document Status schemes with sequence number (Status values). The workflow sequence is working after testing in the Business Blueprint. The problem is, how can I or other users unlock the document if the Status is locked. How can I manage this problem; Should i define a group of user with authorization, where?
Thanks!
Blaise
Edited by: Blaise Vincent Havanaby on Mar 26, 2009 10:31 AMcan u pls explain the steps u tried?
-
Document status wise authorization
Dear all,
I want to give a document status wise authorization to user .
Kindly let me know the procedure.
RgdsHi,
Use Auth Obj C_DRAW_STA in your authorization role.
U will have a status network liket this
Create(AL)-> For Approval/release( FA)* -> Approved/Released(FR)
For Ex :-
Auth role for Engineer is Zdms_engg
This role will have auth obj C_DRAW_STA
Engineer with create auth for doc type DRW will have this values in his auth object
Doc type DRW
Doc status AL,FA
Assign this zdms_engg role to user ID.
HOD role:- zdms_hod
For HOD to approve will have values in his auth obj
Doc Type DRW
Doc status FA,FR
Assign this role to user ID of HOD
You will get the deired results.
Note:- They must have access to document type DRW so use auth obj C_DRAW_DOK with doc type DRW and C_DRAW_TCD with doc type DRW
Also read auth obj concept in help.sap.com to know the significans of each obj and their use and take help of BASIS person to do this.
Regards
Abhijit A. Pachgade -
Transaction BDA5 - Document Status
Hi All ,
We use BDA5 transaction to transfer the Document Info Record from one client to another .
Though we have many status in the document only one status is there in IDOC .
Can anyone suggest us how all the statuses can be sent to IDoc ...
Kindly suggest me with some example .Hi Durai,
I agree there is a possibility to see the Document Info Record's (DIR) status log -> that means what status'es the DIR went through.
However the DIR can have only one current status.
You can see the current status in the document data tab (Field Document Status).
You might have noticed that it is a single value.
So when you are sending an IDOC only the current status is sent.
Hope this answers your question.
Reward points if it does.
Rgds,
Prashanth.
SAP. -
Hi All
We have a situation where a user entering a normal GL invoice in FB01 mistakenly created a sample document
this document was saved but could not be found anywhere, however when i checked table BSEG it was available and been created using transaction FBM1 - however the user has no authorization to use FBM1...
Could she have by any chance made the document status to be M at the time of entereing data - if so how? or is there any other explanation for this... can anyone come across such a situation before..?
thanks much
RukshanaIt might have got created via F-01
You can see that document in FBM3 -
Authorization issues MM/PP STATUS Changes
Hello,
I'm getting the following error even with SAP_ALL SAP_NEW
BDC Transaction Report for ZM02. Report: ZUCC0026
Run by: KHALIFAO page: 1
On: 11/11/2009 at : 09:06:12
In System: Q47
Authorization issues MM/PP STATUS Changes
M365SC1110020 ZFIN M680 MM/PP STATUS 00 Not authorized to change MM/PP status
One of my user is having the following error when she excuted the following steps :
Steps:
SE38/ ZUCC0026 - Material Mass update program for Costing View
Enter the following fields before executions
Material : M365SC1110020
Plant: M680
Check off update material
Field to update: select MM/PP status
New Value: 00
Execute transaction
Thanks
Osama
Expected results: output document should states that update of MM/PP status was changed from XX to 00.
This messageHello Julius,
SY-UNAME
ZUCC0026 550 WRITE: / 'BDC Transaction Report for ZM02. Report:'(b01),
/ 'Run by: '(b02) ,sy-uname COLOR 5,
1167 * IF sy-uname <> 'BATCH'.
1183 READ TABLE itab_zusrgroup WITH KEY group_id = group_id
user_name = sy-uname.
1212 SELECT SINGLE update_ind scop_ind
FROM zusrgroup INTO (itab-update_field,l_scop_ind)
WHERE user_name = sy-uname
AND group_id = itab_fields-group_id.
1219 * WHERE user_name = sy-uname
1223 READ TABLE i_zplant WITH KEY
user_name = sy-uname
werks = itab-werks.
1422 SELECT werks FROM zusrplant
INTO zusrplant-werks
WHERE user_name = sy-uname.
1453 MOVE: sy-uname TO i_zplant-user_name,
Parameter :
188 *PARAMETERS: p_mode TYPE c DEFAULT 'N' NO-DISPLAY. JHSIR35508-
189 PARAMETERS: p_field LIKE itab_fields-descriptio.
190 PARAMETERS: p_name LIKE itab_fields NO-DISPLAY.
191 PARAMETERS: p_newval(14) TYPE c.
193 PARAMETERS: p_file(100) TYPE c LOWER CASE.
194 PARAMETERS: p_filval AS CHECKBOX. "0001+
195 PARAMETERS: p_unix AS CHECKBOX. "0004+
33 PARAMETERS: P_UPD AS CHECKBOX.
Thanks
Osama -
How to provide authorization to set the statuses in Design registration
Hi All,
For HTOR transaction type CRMDRGO status profile has been configured. So based on this status profile the user can set any of the statuses which are there in CRMDRGO.Here the requirement is the user should not be able to set few statuses whicha are there in the CRMDRGO. Means for some of the statuses the user shouldn't have the authorization to set.For this I have created one authorization code and i have configured in CRMDRGO.How can i achieve this requirement.can anybody help me out regarding this.Thanks in advance....
Regards,
Laxman.PIn webUI GET_V for this attribute, make the available values as desired by restricting some values for a certain usergroup or role or on a certain value of a certain Authorization Object.
-
Running Aging reports based on Document date in 2007
Hi All,
I have an issue while running the Receivables aging report in the 2007 version. The customer usually runs the reports based on the document date. Document date holds more importance in their case.
However, in the 2007 version, the aging report is totally governed by the posting date. For example, if I change the aging date, the posting date also changes to the aging date and viceversa. If I want to change the aging date to 01/31/09, the posting date u2018Tou2019 automatically changes to 01/31/09 and when we run the report, it will bring in all transactions until the posting date of 01/31/09.
But, the requirement is to leave the posting date as blank and give the document date u2018Tou2019 01/31/09. This will then pull all transactions until the document date of 01/31/09 irrespective of the posting date.
As a result, when you run the balance sheet with the document date of 01/31/09, receivables show a different balance. This discrepancy is due to the fact that AR Receivable aging report forces to keep the Aging date = Posting date.
This was not the case in SAP 2005 version where we were allowed to key in the aging date and the document date to get results based on document date.
This is very critical as they have recently upgraded from 2005 to 2007 and they are unable to reconcile the balances out of Balance sheet and Aging.
Please advise.
Thanks,
PayalHi Jitin,
We tried that as well but no luck. There is still a discrepency between what the aging shows and what the BS shows. When we put the Aging date as 01/31/09 and Document date as 01/3109, the posting date 'To' is automatically filled with 01/31/09, so it basically searches for all transactions with the posting date 01/31/09 and document date 01/31/09. This is not the requirement as we do not want to consider the posting date at all while running the aging.
I also have some screenshots if I can share. I am not sure if I should report this to SAP for further investigation or am I missing something here.
Thanks for your help.
Regards,
Payal
Edited by: Rui Pereira on May 1, 2009 10:48 AM -
Hello!
I am on solar02 transaction and pulling out IMG objects for configuration. After configuring I am documenting the config in the by pulling object-document . The default status values for this in "processing status"column are - open, in process, finished and not relevant". How do I add more status values to this drop down menu?
Thanks.
MarkHi Mark,
you need to create 2 status schemes.
Goto SPRO > SAP Solution Manager Implementation Guide > SAP Solution Manager > Advanced Configuration > Scenario-Specific Settings > Implementation > Document Management > Status for Documents > Define Document Status Schemes
Do these steps for a blueprint schema and config schema
1. Click yes to the Cross-Client popup
2. Click the New Entries button
3. Name you status Schema
4. Click Save
5. Highlight the new schema
6. Click the status value folder on the left
7. Click the New Entries button
8. Add you values in the order you wish, initial status, min, max, ect..
9. Click save
Go to SOLAR_PROJECT_ADMIN
Open your project
Click the Project Standards tab
Click the Documentation Types tab
Click the Project Template button (bottom right)
Find you documentation types for Blueprint and Configuration in the right hand box
Go to the last column for those documentation types (you'll need to scroll)
Select the newly created schema
Click the save button
Dont forget to assign point
Regards
Kenny -
Send e-mail after change document status solar02
Hi...
How is possible to send an e-mail for someone or a group, when a especific document status is changed to a new value?
Thanks in advance,
Warlei FigueiredoHi Federico,
Thanks for your tip about how to send an email. So, I am trying to send email in my scenario and I don't know if I am choosing the correct type status. I have two questions:
1 - In SE16 transaction, into table TJ30 I dont know what transaction type to select?
2 - Is necessary choose "Depend Partner"? I don't know what kind "Depend Partner" is possible to choose.
Reminder, my necessity is to send an email to someone (doesn't matter in this moment, could be an especific user your choose) after an specific document into solar02 changed status from "A" to "B".
Thank you if possible to help me. -
Credit management Authorization Based on Value.
Hi All,
Can help me out to find whether we can implement Credit management based on different level of Values or not.As i know we can do authorization based on % like 100%, 110% etc.
But i want to activate release authorization based on the Amount like
level 1 Rs 1 lakh( Can release upto 1 lakh) when it reaches to above of 1 lakh
level2 Rs 2 lakh ( it will release upto 2 lakh)
like wise.As what i understand whatever the standard roles are given relevant to % basis only.hello, friend.
yes, you can do this in a few ways...
1. try 'Document Class' - a document class is assigned a certain value, which is assigned to a user (the link to credit management is indirect)
2. the traditional way is to use 'Risk Category', and you can set specific values (e.g. maximum document values) when doing OVA8.
i seem to recall there may also be a way to assign values to risk category, but i will check on this.
regards.
Maybe you are looking for
-
IPod not recognized by the Updater or by iTunes
I have had so many problems with this iPod that I dont know wich to mention first. At this moment the situation is the following: - When I plug the iPod it says 'Do not disconnect', but that remains forever on the screen. - Let's say after half an ho
-
How to detect concurrent updates from MS Access database
Hi... I would like to know how can LV detect the MS Access database if there is any updates data from others application such as VB6 through the same database.. I do not want the LV to check from the database so oftenly. It will only do the checking
-
InDesign and truncated hyperlinks after PDF conversion
I have encountered what may be a similar problem to the one experienced by Greg Hogan posted on 10-01-2007 (http://www.adobeforums.com/webx?224@@[email protected]) I have a Dell Inspiron 6000 with a 1.5 GHz Pentium M processor, 2 GB RAM, Windows XP/P
-
Hi, I've recently bought the new 80gb ipod classic. I also updated the itunes running on my pc to the latest version. After I installed this the cover flow no longer groups my albums properly. Albums with numerous artists featured appear several time
-
Mass change of external Contact domains?
We have a large number of external contacts in our GAL. One of the companies is having a name and email domain change. The email addresses are staying the same except for the email domain. For instance [email protected] is now [email protected] How