Transaction Launcher - TCode Authorization Issue for ERP transaction

We are trying to implement an ERP transaction in the CRM WebUI via the transaction Launcher. Everything has been set up properly and the transaction appears in the nav bar. I am running it to launch a new window. When i click on it, a new window pops up, with transaction IC_LTXE and an error saying
*"You do not have authorization to view transaction ZSD_IC".*
Everything seems to be set up properly and we can access the transaction with the same user id in ERP. He has SAP_ALL.
Does this have anything to do with IC_LTXE? Is there anything special i need to do to assign proper authorization to this user.
Thanks,
jeremy

Hello Jeremy,
We are trying to execute R/3 transaction from Transaction Launcher but we are facing problems.
In order to execute transactions from TL we have copied object TSTC to ZTSTC in both systems and use the method Execute to be used from Transaction Launcher customizing. Then we have customized T. Launcher in order to get two links, one to R3 transaction (using the object ZTSTC, method execute and XD03 as value parameter) and one to CRM transaction (using the object ZTSTC, method execute and CRMD_MKTDS as value parameter).
When we execute the TL link to CRM, transaction works properly through ITS, but executing the link to R3 transaction we receive the following popup message:u2018Logged Off Successfully. You have been logged off from SAP NetWeaver Application Server.u2019 the screen gets in blank and no further actions are executed.
In order to correct the fail we have implemented these notes, but the problem still remains.
0001224663 Launch of Front Office with Transaction Launcher fails
0001263716 Launching Front Office Process using Transaction Launcher
Based on your experience could you help us to get the right configuration to reach R/3 transaction through Transaction Launcher.
Thank you very much in advance.
Best regards.

Similar Messages

Authorization Issue for Transaction Codes PA10,PA20,PA30 &PA40

Hi Experts,
I have created Custom role for accessing ALL HR Transaction codes in IDES System and added to the user & Tested.
All transactions codes are working except PA10,PA20,PA30 &PA40
Please help me regading this.
Advance Thanks,
BBC

Hi,
I had check with basis Team, they told that I have all authorizations.
This is New Installation for R/3 HR IDES System. even basis Team also created role for above transaction code but not getting access.
We can accesss all transaction codes except these.
All are new for HR. here anything needs to be configure for access PA10 to PA40 Transaction codes.
Please advice me.
Thanks & Regards,
BBC

Transaction launcher sales org parameter to ERP

Hi Experts,
We want to pass parameters to the ERP transactions.
We are fine with devision an chanel but we cannot access the right ERP SalesOrg format.
So fare we access the information in the LTX with this structure : //datacontextCURRENTBT/BTOrderHeader/BTHeaderOrgmanSet
But the Sales Org contained is just the CHAR8 Short Description we enter in the OrgManagement it is not the connected ERP sales org CHAR4.
Do you have an idea or workarounds?
Regards, Thea

Hi Thea,
You have to use this API method GET_VKORG_OF_SALES_ORG of CL_CRM_ORG_MANAGEMENT_API to get the ECC Sales Org.
Then in the generated Tx Launcher Class method IF_CRM_IC_ACTION_HANDLER~PREPARE_DATA_FLOW you may have to adjust parameter
ICWEBCLIENTBORKEYPARAMETER.
Anyhow you can debug this method to see what is happening.
Take a look at this class CL_CRM_TL_ERP_VBRK_DISPLAY (this may help).
........Masood Imrani S.

Authorization restriction for BP transaction

Hi,
We need to restrict the BP transaction access to user in the below mentioned way in our SRM system.
1. Restricting BP access to all the users with display access.
2. Restricting BP access to security users with create, change and display access.
What is the main object for BP transaction for restricting access in the above mentioned scenarios?
Here, we have observed one more issue like....
Let say object-B_BUPR_BZT(not sure) is a main object for transaction-BP. If we restrict activity to 03 in that object, it will give display access when we are executing transaction-BP.
Some of other transactions(like PPOMA_BBP) are there in SRM, those are also maintaining same object with all activities(create,change,Display).
In this scenarios, how the above mentioned restriction is going to help the user.
Please check and advice in this.
Thanks & Regards,
KKRao.

> Let say object-B_BUPR_BZT(not sure) is a main object for transaction-BP.
It may be a "main object" for BP, but that doesn't tell you much at all about the security aspects or where in the logic of the transaction it is used. This object is for example not a part of the business logic of transaction SE80, or that I am sure.
If you have no clue, then start in SU21 and read the application help documentation on the transaction (to understand it's context) and the use-cases of the object - also to find the other transactions. Then you will become more sure.
You also need to understand that in the same way the transactions, reports and the "real checks" are layers in the security, objects themselves can also be selective and layered in a conceptually consistent way, or (to make it more interesting...) transaction dependently.
There are lots of shortcuts (even out-of-the-box roles which someone might try to sell you...) but ultimately if you use a SAP system to "build" your business processes, then you need a concept to secure your build. SAP owns the authority-checks in standard programs to enable the process to comply with legal requirements and some common sense.
=> So, you need to choose your transaction (or other entry point) carefully and understand the objects which they use.
Cheers,
Julius

How do i find authorization object for a transaction code?

Hi SD Guru's
I need to find the authorization object for both standard & Z transactions.
How can i find this?
Regards
Ravi

Hi,
check the coding with SE38 for "authority-check" and you will get the objects or set a breakpoint on statement "authority-check" while you execute the transaction.
Regards,
Andreas

Create Display Authorization Profile for SAP Transaction SPRO (IMG).

Dear All,
In my current implementation project there is an requirement to create display authorization profile for SPRO. I have tried a lot but was not able to do so.
Any one is having an experience in creating display profile for SPRO (IMG) ? If any one has worked on this issue then please guide me.
Thanks,
Avinash

Hi
This is security related question. I am not security expert.
But you can check this, Include the following authorization objects in the profile and assign this profile to the target user.
S_IMG_ACTV
S_PROJECT
S_PROJ_AUT
S_PRO_AUTH
and assign activity = 03 (Display).
Hoipe it helps.
regards
Srinivas

Hi All Authorization Issue for CS02

Hi,
I have a transaction cs02. I am making changes using by calling this transaction( ie i have used it in program as call transaction cs02.) but for this transaction few user's don't have Authorization .So when these user's run the report they are not able to do the changes using this transaction. Is there any way where we can do these changes eventhough these user's don't have Authority to 'cs02'.

Hi Jaffer,
You need to use su53 after the error happen and assign the right roles or access to the objects needed so users can make changes in the required transaction.
Regards
Juan
PS: Please award points if helpful!

Authorization issue for TR VD01 & VD02

Hi all,
In customer master creation for TR VD01 and VD02 basically we have 3 VIEWS( General data, company code and sales area data). My main requirement is we have 3 sets of users. for one set of users we should give authorization only for creating and changing general view., and other set of users to create only company code data and changing this view. Ie based on views i need to give authorization to the end users. Is it possiable to do this through abap( through user exit) or else this requirement can be done by basis.
Regards,
Smitha.

Hi Suvendu,
Many thanks for your replay,
here for this scenario i am not able to identify which view currently the user is changing(techinically)
Ie in userexit i am not able to identify which view he is currently changing.
How can i distinguish bwtween this 3 views.
Regards,
Smitha

Authorization issue on SHD0 transaction variant in R/3

Hi,
Can anyone help me on the below issue?
Created a transaction variant ZME31K using SHD0 on R/3 system with the base transaction ME31K.
And created a transaction ZME31K for the above transaction variant.
Created one ID which has access only to transaction ZME31K.
But when tried to create contract using ZME31K, it allows to create the contract, but ended up with message "You are not authorized to use ME31K".
Anyone faced similar issue before? how this can be resolved? As per the busniess requirement, they can provide access only to the transaction variant for the user and they will not be assigned to ME31K.
-Thanks,

> We are doing an Upgrade assessment wherein at R/3 side, the system is being upgraded from 4.6 to ECC 6.0.
> I wanted to know the impact the Change in Transactions at R/3 side.. namely transactions..
> AS02, CT02, F-02, F-41, F-49, FB01 would have on BW.
What do you mean? I don't get your question. What impact should those transaction have on BI?
Markus

Restricting the authorization Object for B2B Transactions

Hi All
we are facing the problem in the ISA b2b app, actually the scenario is as below.
we have various transaction types like b2b sales,Peoplesoft order,Request for Order change, RMA ,Request for Quotation(RFQ) and metel order.
As per the requirement, The client wants only a few functionalities for a particular user.
Example:
Transaction Type Authorization
PeopleSoft order View only View only
B2B:Req. OrderCh x x
B2B: Req. RMA
B2B: Req. Quote x x
Metel Order x
For b2b sales transaction a lower level employee would only be able to view the order and he should be restricted to make any changes. Is there a posibility to restrict in this manner? This is Urgent. Please respond immediately. Thanking you in anticipation.
Message was edited by:
Sunil Kumar

>
Viral741 wrote:
> Hi All
>
> I have a requirement in SAP Security to restrict the authorization object S_ALV_LAYO to a particular set of users.
>
> Background:
>
> We use composite roles which is shared accross all areas(Finace,marketing,work managment).Now the requirement is for from Work managment to restrict S_ALV_LAYO so that user cant change default layout and can create user specific layout,but other areas are not ready for this.So please let me know if there is any way i can restrict this auth object only for work managment area only.
>
> Thanks,
>
> Nitesh
Nitesh,
Remove access to S_ALV_LAYO for general users and give access to F_IT_ALV instead. Keep S_ALV_LAYO for the users who will be maintaining the default layout.
Good Luck!

Authorization object for parameter transactions

Hi all,
I'm trying to restrict transaction VL10h for shipping point,this transaction is a parameter transaction and is not controlled by an authorization object directly.when I run a trace , transaction Vl10x shows up. The authorization object that is being checked is V_LIKP_VST.
Note : The requirement is when the user executes transaction VL10h he/she should be able to display only those shipping points they are authorized to.
Please advice.
Thanks,
Mohan.

Hi Mohan,
For transaction VL10H you can specify values for the following fields in authorization object V_LIKP_VST:
-Activity:
01     Create or generate
02     Change
03     Display
04     Print, edit messages
18     Deliveries from coll. proc.
24     Archive
25     Reload
85     Reverse
-Shipping point: Here you must set the restriction for each group of users that are allowed for the maintenance of the shipping points that are used for delivery processing.
You can restrict the access through these fields.
Regards,
Leandro

MT940 Swift Bank EBRS Issue for Check transactions

Hi SAP Gurus,
I have configured EBRS for my client. We are receiving the Bank statement in MT940 SWIFT Format. In the same bank is giving The Check number for clearing open items from bank sub account my doubt is how to clear the open items on the basis of check number.
In the OT83 configuration I have kept interpretation Algorithm as a 011: Outgoing check: Check number not identical to document number.
When I am running trying to do Reconciliation through FEBA/FEBAN system is trying to search open items based on BELNR and not with CHECT.
Now in front of BELNR field it is getting upper limit and Lower Limit as a * so system is selecting all open items from the Sub account and EBRS is getting failed due to the same error.
Can anyone guide me how to clear open items from Bank sub gl account on the basis of Check number.
Thanks in Advance!!!
Edited by: sagarckar on Sep 28, 2011 1:02 PM

Hi Nikhil,
Thanks for the prompt reply...
I have checked that the CHECT field given Check number is updated in My check reg. as well.
I have received file in Below MT940 Format
:20:110817
:25:001368489001
:28C:00331/001
:60F:D110817LKR10045009,66
:61:1108160816D10048,18NTRFNONREF          //NONREF
:86:TRANSFER REVERSAL FROM
012-150439-040
:61:1108160816D59530,00NCHK296055          //NONREF
:86:NONREF
:61:1108160816D1470,00NCHK058334          //NONREF
:86:NONREF
:61:1108160816D3750,00NCHK058335          //NONREF
:86:NONREF
In ref they have not given any value i have configured my algorythm as 011 but when it goes to Batch input session to post document it is posting one entry that is to main ledger correctly and when it goes to select open item from subledger it is taking BELNR as a search criteria But in front of it system is showing * so system is not able to find exact document to clear the subledger transaction.
Is there any sap note to be applied here as i am stuck on it since long time....This is first time working on EBRS...not able to understand the exact problem why it is happenning here as my MBRS is working perfectly allright with the same posting rules i have used for both.
Regards
Sagar

Language issue for some transactions

Hi,
We recently installed PT (Portuguese) language and found some problems with SAP Standard Transactions.
Some SAP standard transactions shows "Field label" in English when we login in PT language.
We tried applying SAP notes and activating the programs again but it dint work.
Do anyone has any idea about such problems?
Thanks,
Chirag

Hi Chirag:
My company has presence in brazil and now we will also be offering products to the brazil customer. In our initial analysis of local reporting requirements, we came across SPED regulations which require us to record the transaction data in portuguese and also transfer data electronically to the brazil regulators.
Do you folks have similar requirements and if yes, were those met via the SAP portuguese language pack? Can you please share your experience on how the language pack works? Does it translate data from English-->Portuguese at the database level or is it the UI that is just in Portuguese? Appreciate your feedback.
Thank you!
Rahul

Security authorization restrication for IW32 transaction

Hi,
The client requirement is to not allow to change any field for an order. I run the trace for each and every changes and i didnu2019t locate any sort of related object to restrict for not allowing them to modify the fields like "changed and saved the entries in Mn.wk.ctr and Func. Loc".
For Example: Run IW32 - > Order number - > hit enter - > it will take to next screen and the order status will be REL.
In that status system is populating all the fields of that screen with changed mode, it mean that allows user to change any field under that status and save the changes.
Let me know is there a way from security end to restrict it? if so that will helps alot for the requirement of the client.
Kindly help us.
Thanks & Regards
SV

Prakash,
In my query i have given with an example that when a order is in status REL then system is allowing to modify any field under that screen.
I will try with the given soultions, please let me know if you find any other alternative soultion.'
thanks alot for each and everyone for giving the right suggestions.
SV

Authorization Issue for Object CRM_ORD_PR

Dear All,
When user search sales orders in PCUI by sales org, Distributional Channel and Division criteria it shows the result list. But it is also throwing the error as "You are not authorized to Display this transaction"
I am not sure why system is showing this message.
I have checked the auth objects for this user.Authorization Objects CRM_ORD_PR and Object CRM_ORD_OE are inactive for the Role.
When I searched the sales order in SAP GUI and when I click on the sales order from Locator it is giving the message as "You are not authorized to Display this transaction". When I checked the SU53 dump it is giving the message "Authorization check failed
Authorization Obj CRM_ORD_PR Authorization Object CRM Order -Business transaction Type.
So my question is though we have made the CRM_ORD_PR object inactive why system is showing the message in SU53.
Also when I checked the trace system is also checking this object.
Please help.
Pankaj

Rika,
Thanks for taking the time to reply, it's really appreciated.
I will pass the details of this note over to our Basis team to see if this helps us resolve our issue also (we are trying to prevent unauthorised objects showing in user search result lists).
We are on CRM 2007 though, so I am not sure whether it will still be relevant.
Many thanks again,
Andrew G.

Transaction Launcher - TCode Authorization Issue for ERP transaction

Similar Messages

Maybe you are looking for