Transaction similar to VKM1 with only display access
Hi,
I would like to ask, do you know the transaction which would be similar to VKM1 (Blocked SD documents), but its user would be granted with display mode only?
I tried to check the rest of the transactions from VKM* group but it seems there are none such reports.
This kind of transaction shall be used by our Logistics to check which current orders are blocked and what is the reason behind it (lack of credit
limit/overdue items on customer account) – but they mustn’t be authorized to release anything.
Regards,
Kiran
Just wanted to add to Siva's response that user access is regulated not just using the transaction codes but the authorization objects within those transactions. Just like in this case, the same transaction may be used for the change and display purposes.
There is authorization trace available in ST01 transaction that can be used to see what objects are checked when running a transaction. There might be other tools as well (I'm not a Security expert), but this one worked well for me so far.
Similar Messages
-
System with only Display Access
Hi,
I have the following question, is it possible to configure a system copy with only Display access (at a sap level or Oracle Display mode,
et cetera) without creating restrictions in an authorization level?
Kind regards,
LuisHi Luis,
I don't think this is possible, what you can do is create a system copy and assign display only authorizations to the users.
Regards
Juan
Please reward with points if helpful -
Authorizations to restrict Query Designer with Only Display option
Hello,
I have looked all most all possible ways in internet to find out a suggestion/solution for the below. But Invain.
I would like to know the Transactions, authorization objects and profiles that are responsible to restrict users not to change and copy queries from QD.
I need only display option for queries.
Also,please confirm shall we restrict the same from Transaction SCC4.
Thanks In Advance.Hi there,
Since you're talking about a QD system, you should lock it in transaction SCC4.
In case you need to change things in QD without opening the system in SCC4, you can go to transaction rsa1->transport connection and click on Object Changeability. In there you can define what paricular options are "opened for changes" even with SCC4 in close mode.
Also, for roles having that objects, you should use the authorization object S_RS_COMP and S_RS_COMP1 with Activity with value 02 - Display
Diogo. -
Outlook Integration installation with only remote access
Hello B1 gurus !!
Is it possible to install Outlook Integration when the possibility given by a company is only to access the SAP B1 server thru Remote desktop functionnality ?
If yes, how does it work and what are the steps (if different as given SAP Install procedure) to achieve such an installation ?
Exemple: SAP B1 Server is installed in France, Users accessing it are in an other country and can access it only remote.
thanks for your quick answer
ChrisHello Chris,
It is absolutely possible. That is because when you connected through Remote Desktop, you can do anything just like local in the same network. The security profile has to be set up correctly though.
Thanks,
Gordon -
Dear Team,
I have Check one of my User ID with T-code smartforms
He can Change Form .Then He can save also & Change request Create .
I want That In T-code of smartforms .he can,t change the any Form.
Mean Change option only in display mode.
So how I can Do This one.
Thanks
manuHi Manu,
First, please read the last 4 posts to this thread: Backup Log
I have been trying to contact you...
Specifically to your question, from the ST01 trace:
when others. "S_DEVELOP without package protection.
if p_s_develop-devclass = space.
authority-check object 'S_DEVELOP'
id 'DEVCLASS' dummy
id 'OBJTYPE' field p_s_develop-objtype
id 'OBJNAME' field p_s_develop-objname
id 'P_GROUP' dummy
id 'ACTVT' field p_s_develop-actvt.
else. "S_DEVELOP with package assignment.
authority-check object 'S_DEVELOP'
id 'DEVCLASS' field p_s_develop-devclass
id 'OBJTYPE' field p_s_develop-objtype
id 'OBJNAME' field p_s_develop-objname
id 'P_GROUP' dummy
id 'ACTVT' field l_develop_actvt.
endif.
endcase. " P_OBJECT_CLASS
So, you need to restrict their S_DEVELOP authority to display only activity for object type SSFO, and possibly the name and package as well if you want some but not others.
Cheers,
Julius -
Adding tcode to role in display access.
Hello,
Please can someone suggest how we can add transaction codes to a SAP role with only display access.
That means users should have only display access when they execute that transaction. Please suggest.
Thanks.>
adnan shahid wrote:
> I would like to add the following tcodes in display access. In all the tcodes only auth object present is S_TCODE.
>
> OKY9
> OKYA
> OKY0
> OKKM
> OKK6
> OKK5
> OKG6
>
> Please suggest.
I suggest that your run an authorisation trace to see what objects those transactions reference.
Create a role with those transactions and objects in display only mode. Then get a functional consultant to negative test those roles.
Don't assign with other roles which give change access to the auth objects you have restricted. -
Dear all
how do we restrict PE51 SAPMPE51 HR form editor for only display access..sooner i gave it it dosent give any objects for me to maintain the disply authorization..can come one tell me if there any objct goes with this T-code where i can maintain only the Display access to the user..Hi,
Goto SU24> enter the T.code in which u want the user should have only display . Execute it (Button on Appl> Toolbar), it gices 2 objects and on Appl. toolbar its a button as check indicator> click on this button.
It display a list of objects, select the objects with CHECK AND MAINTAIN priority.
Now goto the role of that user in which u assigned tat perticular Authorization , Double click on that role, it takes u in PFCG screen, click on Authorization Tab. Check that it shold be in change mode. Now check tat perticular object which v searched in SU24 with check and maintain, (cntrl+F), find tat object, after getting the object , in activity remoce all the selected fields, and just select 03 which is for display. Repeat the same for all objects and generate.
Now the user has only Display access.
Regards
Syed. -
How to restrict FBL1N only to display access
Hi,
I need some help in restricting access for FBL1N. The requirement is the user should be able to only display the vendor items for the given opcos. I created a test role for this tcode and maintained the activity for all the auth objects to 03. But still user is able to change the vendor details. When ran trace, it was showing the access to Tcode FB02. but not sure how the test user is getting this access as the test role does not contain FB02 and user does not have any other role. Please advise
Regards
KavithaRaghu Boddu wrote:
Hi Kavitha,
>
> FBL1N internally calls lots of tcodes and FB02 is one among them. Check the table TCDCOUPLES.
>
> I don't think this restriction is possible only with adding 03 activity for the F_LFA1* and F_BKPF* objects.
>
> If you check FBL1N in SU24, there are a few other authorization objects that are in check state. You need to make them check maintain and further maintain the activites in the individual roles.
>
> However, this may impact on the current roles that have FBL1N transaction code.
>
> Hope this helps!!
>
> Regards,
> Raghu
Despite the SAP_ALL removing the authorization problem.... I would like to enquire about this post.
Can you please explain each of the statements you have made and provide some evidence?
If the user has the correct authorizations then they are are wrong and the "check" and "check/maintain" status has no impact on the coding in customer type systems.
Cheers,
Julius -
Authorization roles for display access to PD transactions
Hi all,
There is a requirement to create a new security role to allow display access to PD transactions :
> Organisational and Staffing Display PPOSE,
> Display Position PO13D,
> Display Organisational Unit P010D
With this role, display access needs to be restricted to view organisation units and positions within the line of business where the position with this security role sits, eg position is within Direct Sales and Service 55001641 therefore they can only view organisational structures that report through to this top org unit.
Any inputs regarding this would be appreciated.
Regards,
ManaseeTry with object 'S_ENQUE' and ID 'S_ENQ_ACT'...
Hope it helps!
Bye,
Roberto -
As a stockholder, I would like see the development of iTV with Retina display and integrating Siri control, internet access, and iTunes apps. This new product would be a large screen, thin wall mounted television, much like a oversided iPad.
Do you think this product is possible?In general theory, one now has the Edit button for their posts, until someone/anyone Replies to it. I've had Edit available for weeks, as opposed to the old forum's ~ 30 mins.
That, however, is in theory. I've posted, and immediately seen something that needed editing, only to find NO Replies, yet the Edit button is no longer available, only seconds later. Still, in that same thread, I'd have the Edit button from older posts, to which there had also been no Replies even after several days/weeks. Found one that had to be over a month old, and Edit was still there.
Do not know the why/how of this behavior. At first, I thought that maybe there WAS a Reply, that "ate" my Edit button, but had not Refreshed on my screen. Refresh still showed no Replies, just no Edit either. In those cases, I just Reply and mention the [Edit].
Also, it seems that the buttons get very scrambled at times, and Refresh does not always clear that up. I end up clicking where I "think" the right button should be and hope for the best. Seems that when the buttons do bunch up they can appear at random around the page, often three atop one another, and maybe one way the heck out in left-field.
While I'm on a role, it would be nice to be able to switch between Flattened and Threaded Views on the fly. Each has a use, and having to go to Options and then come back down to the thread is a very slow process. Jive is probably incapable of this, but I can dream.
Hunt -
I was attempting to update iphone 4s today, laptop went flat during the last stages. The iphone now only displays USB cord, with an arrow pointing towards iTunes emblem. iTunes will not accept/read the iphone. HELP??
If you have the latest version of iTunes you should not have to download the ipsw file separately as jalp suggests. iTunes will download it automatically.
This error (9) most often means that your antivirus or firewall (or router) is blocking access to Apple's servers. In rare instances it can also mean that the phone was hacked (or "jailbroken") to unlock it. If this is the case you must do a DFU restore, not Recovery Mode, as follows:
Reboot your computer
Disable your antivirus and firewall. If you has Kaspersky you may actually have to uninstall it, as it can never be turned completely off.
Connect the USB cable to a USB port directly on your computer, not to a hub. DO NOT connect the other end to the phone
Disconnect all USB devices except for mouse, keyboard and iPhone cable.
Launch iTunes
On the phone hold the HOME and SLEEP buttons at the same time for EXACTLY 10 seconds, then release the SLEEP button but continue holding the HOME button. The screen should be black. If it has an Apple logo this means you held both buttons too long. Release the HOME button and do it again.
While holding the HOME button connect the free end of the cable to the phone.
After a short while iTunes should recognize a phone in "recovery mode" (iTunes doesn't know the difference between DFU and Recovery modes, but the phone does)
Release the HOME button and don't touch the phone or the computer until the process completes or you get an error message. Ignore any displays on the phone.
If the error recurs the phone was probably messed up when it was hacked. This is not a hardware problem, or if it is, it isn't one you can fix.
You can try repeating these steps with a different computer and a different cable. If that fails also the phone is probably not repairable. -
Allowing only 'display' & no 'change' access within J2EE
Hi Experts
We're on EP 6.0 -SP11 WAS 6.40. We've only installed the Java stack & we use the ABAP as the UME data source. All the id's in the ABAP system appear at the J2EE level, For our J2EE administartion for using tools like the Visual Administrator we use the J2EE Administrator id J2EE_ADM_EPP(id created in ABAP before we started the WAS installation), this id allows change as well as display access in the J2EE, for the standalone log viewer also we use this id to connect from our client PC's.
1. I want to know if there is a way by which we can connect to the J2EE using an id which is only allowed 'display' access & no 'change' access. This is to allow passing some J2EE administration functionality to some persons whom we don't to make any changes.
2. For using the stand-alone log viewer can we connect using any J2EE id, which is not given the 'administrator' role within J2EE engine.
Thanks & Rgds,
Abhishekdata: cursorfield(20).
if sy-tcode = 'MM02'.
get cursor field cursorfield.
if cursorfield = 'MARA-BISMT'.
authority-check object 'ZMDOLDMAT' id 'BISMT' field input
id 'ACTVT' field input.
if sy-subrc = 0.
exit.
else.
message e009(zmd) with
'You dont have authorization to change' 'OLD MATERIAL NUMBER'.
endif.
endif.
else.
exit.
endif.
I am using the above code.. its working fine for my purpose but when they dont want to change the value of BISMT then its blanking out the value on the screen..
Any idea why its happening ??
thank you,
Suresh -
Currently my address book only displays e-mail addresses. It uses the portion of the address in front of the @ as the name. How can I sync it with my i-phone 4S that has name/numbers and addresses of my contacts?
Hello there, Seta.
You are correct that this can be done with iCloud. The following Knowledge Base article provides some great instruction for syncing contacts:
iOS: How to transfer or sync content to your computer
http://support.apple.com/kb/ht1296
Particularly:
Contacts, Calendars, Bookmarks, and Notes
You can sync contacts, calendars, bookmarks, and notes with other applications on your computer. This allows you to keep all your information in sync across multiple computers and iOS devices. The settings for these items are all in the Info tab for your iOS device in iTunes. With your iOS device connected to the computer, select your iOS device. Then click the Info tab.
For details on syncing content on your iOS device with your computer, click the sections below.
Contacts
To sync contacts with your computer, choose "Sync Contacts with" within iTunes for Windows, or "Sync Contacts" in OS X v10.8, or "Sync Address Book Contacts" in OS X v10.7 and earlier.
You can sync your contacts with:
Microsoft Outlook 2003, Microsoft Outlook 2007, Microsoft Outlook 2010 (Windows XP, Windows Vista, Windows 7, and Windows 8)
Windows Address Book (Windows XP)
Windows Contacts (Windows Vista, Windows 7, and Windows 8)
Address Book (Mac OS X v10.7 and earlier)
Contacts (Mac OS X v10.8)
Microsoft Entourage 2004, Microsoft Entourage 2008, or Microsoft Outlook 2011 for Mac
Notes:
When syncing contacts, you can choose to sync all of your contacts or only selected groups. The option to sync selected items may not show up until after the first sync.
You can select a group of contacts to which all new contacts created on your iOS device will be added.
Additional options for syncing include syncing your contacts with Yahoo or Gmail/Google Mail. You will need to configure it with the user name and password for your Yahoo or Google account.
Thanks for reaching out to Apple Support Communities.
Cheers,
Pedro. -
Since purchasing a new iPhone 5 and macbook pro with retina display I have decided to keep the iPhone 5 for phone contacts only, and the macbook for email contacts only .. Is there a way for me to keep these as they are recorded on each apple product when I sync with iTunes as it has changed my iPhone and put in email contacts and thus deleted iPhone phone contacts once when I syncd thanks appreciate any help
To prevent your iPhone from automatically syncing when you plug it in, click on iTunes in the menu bar, then preferences, then "devices", then tick "prevent iPhones, iPad's and iPod's from syncing automatically".
Plug it in, then on the iPhone sync summary screen, click "info" along the top.
Make sure the "sync contacts" option is not ticked. as long as it's not ticked, then it won't sync with your mac's contacts but will still include them in backups.
Also, if you use iCloud, make sure that the iPhone/mac are either not signed into the same account, or that "contacts" is not turned on for both of them -
Problem with Flash videos. They are only display in "Private Browsing" mode, in Safari 5.1.7
The symptoms is: The flash videos are only display with a full red bar and nothing happen, no video no sound nothing. The Flash player was upgrade with 11.2.202.235. before safari 5.1.7. I have an iMac with SL, and a Macbook with SL too. However after I upgraded safari 5.1.7 the flash videos are not display correctly, (only videos). The same happen in both computers.
I need to tell you that I follow all the possible recommendations that I founded in internent. I uninstall flash pug-in many times. I restore both. I switch many buttons and options like "reset safari", "empty cahe", "block pop-up windows", "enable java-script", "enable java". I turn off and on the firewall. I switch all the options in the flash player plug in preferences. And nothing. I turn on and off the plug ins. In fact I tried all the possibilities in the preferences menus from the programs.
In one occasion I had a glimpse of functionality for only one hour without problems after I reinstall safari from the Apple website, but only worked until I turned off the computer. The next day was the same problem.
After I fought with safari 5.1.7 and the plug-in flash player 11.2.202.235. Now I noticed something wired, only when I switch the "Private browsing" option in safari is when the videos are displayed correctly.
The same videos work perfectly in Firefox.
Some Suggestions?Thank you everybody, the problem was corrected in a unexpected way, I decided no to pay attention to the problem after a week fighting with that. I was navigating in a private browsing for two days. I turned the private browsing off again the next Monday, after a week I noticed that all the videos were display correctly, I do not have the problem again. That was wired because at the same time in the laptop everything is ok too. I have my extensions ON, Block Pop-up windows, In Flash payer all the options in ask....something. Only the option Disable Java script in not activated, only when I activate that option all videos are not display.
I think maybe I updated the computer and maybe something happened in the middle. I always update my imac and my macbook at the same time. There is a Flash removal security update in may 14. Maybe that fixed the problem.
Thanks to everybody, everything is ok now however I wanted to know what was the problem.
Maybe you are looking for
-
British Pound Sterling with UTF-8 and ISO-8859-15
Please excuse my long-windedness ... I'm simply trying to answer all possible questions up front and give the most possible information. I've searched through tons of forums and all over various sites and references and am not able to come up with a
-
Local DNS server (corporate intranet) does not like Firfofox requests. Intranet sites end up with: Host Not Found DNS error (the host name of the page you are looking for does not exist) or Server did not accept the connection. Please check that the
-
Can I use dates from dual to fetch all he rows between that dates?
I am trying to get the records that have expirations in the month of May What is the correct syntax to use the dates from dual to get all the rows that fall between two dates. I am stuck with this query.. can any one look into it please.. insert into
-
How to Create a rule in Oracle Business Rules Rule Author and how to create a Decision Service Partner Link in BPEL that referers the Rule Repository and implement the same in a BPEL process. can anybody help me with an example...
-
Enhancement for 6201 screen in SAPLV69A for VA01 transaction
hi experts, i need to enhance the 6201 screen in SAPLV69A program for VA01 application, is there any user exit for this particular screen.