Trouble when adding / modifying authorization objects in a role through ERM

Hi everyone!!!
We're having some issues when configuring ERM, we followed the Post-Installation guides and we are done with the config part, but when we try to do an example creating a role, we're getting an error message when attempt to add the authorization data.
When we look at the log, we find this message: /VIRSA/GET_ACTGROUP_TIMESTAMP function template not found on RD1
This is the last log...
2010-11-05 17:03:42,515 [SAPEngine_Application_Thread[impl:3]_30] ERROR /VIRSA/GET_ACTGROUP_TIMESTAMP function template not found on RD1
java.lang.Throwable: /VIRSA/GET_ACTGROUP_TIMESTAMP function template not found on RD1
     at com.virsa.re.service.sap.dao.SAPRoleTimestampDAO.getRoleChangedDetails(SAPRoleTimestampDAO.java:136)
     at com.virsa.re.bo.impl.ConcurrentAccessRoleBO.isRoleChangedInPFCG(ConcurrentAccessRoleBO.java:228)
     at com.virsa.re.role.actions.AuthAuthorizationDataAction.pageLoad(AuthAuthorizationDataAction.java:6865)
     at com.virsa.re.role.actions.AuthAuthorizationDataAction.execute(AuthAuthorizationDataAction.java:213)
     at com.virsa.framework.NavigationEngine.execute(NavigationEngine.java:273)
     at com.virsa.framework.servlet.VFrameworkServlet.service(VFrameworkServlet.java:230)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.runServlet(FilterChainImpl.java:117)
     at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:62)
     at com.virsa.comp.history.filter.HistoryFilter.doFilter(HistoryFilter.java:43)
     at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:58)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:384)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
Plz help us, we can't find any information about this error.
Regards
Connie

Hi,
Settings need to be checked-
1. Connectors must be identical for all components for a particular system and test connection should be successful.
2. Unicode should be checked for RAR connector.
3. Patch Level should be same on GRC and Backend and all backend post-installation activites must be completed - (BC set activation, Program etc)
4. RAR Objects Import must be done.
5. ERM Background jobs must be completed before doing Role Creation- Transaction/Object/Field sync, Org Value sync and activity sync.
If above activities are done, no issues should occur in tcode/Object assignment in role.
Regards,
Sabita

Similar Messages

Is there a Limit on number of authorization objects in a role?

Hi all,
Is there a Limit on number of authorization objects in a role because I am getting the following error.
Authorization is full. Please enter fewer values
Message no. 01262
Diagnosis
You have included too many values in an authorization.
Procedure
Please distribute the data to at least two authorizations and combine them in a profile.
Thanks.

Hello Neha,
Message no. 01262 refers to the entered values in an authorization, not to the objects listed in the profile!
So this message tells you, that you have to split the authorization, as the authorization contains too many values. It is not a quesiton of that you have entered too many different objects to the profile!
Please refer also to:
[SAP Note 410993|https://service.sap.com/sap/support/notes/410993]
and
[SAP Note 943796|https://service.sap.com/sap/support/notes/943796]
b.rgds, Bernhard

How we can remove one authorization object from multiplt roles

How we can remove one authorization object from multiplt roles

> Correct me if I am wrong !!
O.K., Here I go
> But if the object is maintained in SU24 and if you use Expert mode for generation of the role then again those objects may be pulled.(make sure you never use expert mode once you delete the objects)
Actually using expert mode and choosing 'edit old status' is the only way to avoid objects being 'pulled in' after menu changes.
> As jurjen said, you may download the tables and instead of deleting the object from the excel sheet, change the value of the object in column "DELETED" = X, by doing this only the objects get inactivated(but remain in PFCG).
I am not speaking of downloading tables but about downloading roles from PFCG. This will not get you a spreadsheet but a flat textfile. If you whish to set the object status to deleted you'll have to swap the space on position 207, right behind the 'U, S, G' flag, with an 'X' for all corresponding lines.
Jurjen

Mass change of authorization objects in several roles

Hello,
we have to change a authorization object in almost 200 roles. Is there any possibility for mass change of authorization objects in several roles? We don't use the central SAP user administration.
Best Regards
Andreas Walter

> at the moment all entries has the value "*". We want to change this value into "0001".
Good!
Here comes:
1- download all relevant roles in once from PFCG. Make sure you use an appropriate codepage so you don't loose special characters in the role and menu texts.
2- copy and backup the download file
3- in the download file (is a text file) look for all lines starting with AGR_1251 and conatining M_MATE_WGR and the field you want to change
4- take out the star and two spaces and replace by 001. This file is a set of fixed record length table exports and keeping the original length is very important.
5- upload the edited file and generate the profiles.
As you may see this is not SAP standard and completely at your own risk. Best try in a sandbox client first.
Good luck!
Jurjen

Adding new authorization objects to transactions

Hi experts,
i would like to add new authorization objects to specific transactions, for example the object K_CCA for checking the cost element in the transaction KB15N.
What do we have to maintain, except the transaction code with (SU22). What do we have to do with the program behind the transaction?
Is it "just" adding two line of code into the auth object check in the program, similar or like described for client specific ABAP-programs???
Any experiences on that?
Regards
Florian

Hi,
First add the objects in DSO then in Info Cube.
Map the same with transformation.
Move the objects to production then DSO.
Load the DSO first. then delete the data from cube in production.
Now move the modified cube and transformation to production.
Now load the Cube from DSO.
No need to change any thing in existing query.
I hope this will help.
Thanks,
S

Cannot modify an authorization object in pfcg role for a business role

Hi Experts,
I have created two z pfcg roles from the standard business role CRM_UIU_SRV_PROFESSIONAL lets say by names zagent and zmanager. My requirement is actually to map these two pfcg roles two a service professional agent and service professional manager custom business roles respectively( I have created these custome business roles from standard business role servicepro) . I have identified an authorization object by name CRM_CO_SE which is basically used to check whether the user is authorized to create service contract transactions. So, in the agent pfcg role, I need to de activate or deselect this particular authorization object so that the agent will not be able to create service contract. (This is not a real time requirement, but an internal assignment). When I change this object in the pfcg by deselecting 'Allow' check box and try to generate, it is not getting generated. I have selected all the options from the 'Expert mode for the profile generation' and still the traffic indicator for that authorization object is yellow. Am I doing anything wrong?
Please help me.
Thanks
Ajith C

Hi Leon,
Thanks for helping me, I have restricted the unauthorized user from creating a new order by disabling the 'New' button by checking the business role in the code. The pfcg configuration, I am skipping it for now. I have one mnore requirement. When one clicks on any items in the search result for the Service Contracts, it opens the details of that service contract with an 'edit' button. I can disable this button using do_output_preparation method for the some business roles. However, I want to disable this after checking a condition. The condition is that, edit button should be active, only if that service order was created by the employee who has currently logged on. I am relatively new to CRM and I could not figure how I can check it during run time. Could any one please help me with this?
Thanks,
Ajith

Going to the last page of a table when adding a new object

I added a Table(com.sun.rave.web.ui.component.Table) on my page and a button outside of that table to add new object rows. My problem is that I want the table to move to the last page when I add a new object. Instead the default bahaviour is showing the first page. Even if the newly added row is on a page > page 1.
e.g If I have a table with 5 pages and I am on page 1 and I add an object I want to see the last page of the table where I added the new object. In other words I want it to go to page 5 or page 6 in case the number of the new object is > the number of displayable rows of a page.
I did it with Javascript but I just dont like it. I wanna do it programmatically.
Any help?
Thanks in advance guys!!!

Hi!
Try to look here:
http://forum.java.sun.com/thread.jspa?threadID=5142038&tstart=45
Thanks,
Roman.

Identify duplicated authorization objects in a role

Hi,
We built some roles manually by drag and drop transaction through the menu tab. In some roles, we have duplicated authorization object
For example, in PM : Maintenance Plant (object I_SWREK), we have 2 profiles with SWERK=* and TCD = (list of transactions).
I'd like to generate a new role with only one profile which contains SWERK=* and a list of transactions in TCD
The pb is i don't know at first which authorization objects or profiles are concerned by this duplicated objects
Is there a program, trans code or function module i can run to get this information ?
Thanks
Guillaume

Hi Guillaume,
I would say, that there will be not much difference.
The auth.-check scans one authorzation (not profile!!!) after the other for the requested values.
So for example:
check for TCD = IE03
first hit is successful for both scenarios, as both list IE03 at first place.
Scenario 1:
SWERK=* and TCD = IE03, IL03, IP06, IQS1, IQS2, IQS3, IW3D
Scenario2:
SWERK=* and TCD = IE03, IL03, IP06
SWERK=* and TCD = IQS1, IQS2, IQS3, IW3D
second example:
check for TCD=IW3D
Scenario 1: the first authorization is loaded and verified, last value gives success.
Scenario 2: no success for the first authorization, second auth. has to be loaded for analyzis and gives success with the last value.
So scenario 2 could even be less performant....
did you realize already some differencies???? Would be interesting...
thx, Bernhard

Audio authorization trouble when adding audio to slideshow

I recently started a slideshow on iDVD '08, which by the way is AMAZING, except when I try to drag and drop a purchased audio file from the media browser 2 the editing window, it asks me to authorize the file through iTunes. Thing is, I've authorized my entire music library already, so what gives? I authorize the song file, try to play it in the slideshow, but I get the same message asking me to authorize the song file, again! Help!

Seems to be a recent bug that is effecting many people. The short term work around until Apple fixes the issue is to put your purchased songs in a playlist, burn that playlist out to an Audio CD (a CD-RW might be good for this if you need to do it often), then re-import the song from the burned CD in any format you fish, although AIFF might be best for iDVD use.
Patrick

ProcessdpCommandEx error when adding or removing object from WebI report (based on BEX query) query panel object list

Hi,
We have WebI reports build on BEX using BAPI connectivity. When we are trying to add a object in query panel in a existing report we are getting this ProcessdpCommandEx error. But error does not appear when we add at the end of the list of objects already added.
Can you calrify whether this could be some setting issue or it is a known bug?
Can you share SAP Note No in case it is a known bug?

Hi Avijit,
This error occurs in case of any failure in the connectivity. It is like the data providers are not getting processed.
You have mentioned that the issue does not come with newly created reports
Are you creating new reports on migrated universe or a newly created universe?
If issue only comes with migrated universe, please check if the connection has been migrated properly and required middleware and database connectors are in place.
If connections are in place, try importing and exporting the universe once and check.
In case, new report works fine with migrated universe, then you can simply try to re-point the universe by editing the query and can run it again and check.
Regards,
Yuvraj

How to improve slow PowerPivot performance when adding/modifying measures, calculated columns or Relationships?

I have been using PowerPivot for a couple of months now and whilst it is extremely quick when pulling in data to populate Pivot Tables, it is extremely slow to make the following kind of changes to the Data Model:
- Add a Measure / Calculated Field
- Add a Calculated Column
- Rename a Calculated Field
- Re-name a Calculated Column
- Modify a relationship
- Change a tables properties
- Update a table
In the status bar of excel I get a very quick 'calculating', then it spends a lot of time 'reading data',
then it 'finalises' after which nothing is in the status bar but it still takes approx. 45 seconds before the program becomes responsive again. This waiting time does not change depending on the action, it is the same if I rename a
column as it is if I add a new measure.
My question is what affects performance of these actions and how do I improve it?
To give you an idea of where my data comes from, I have:
- 7 tables that feed into the Data Model directly from within the workbook which contains the data model itself. These are a combination of static tables and tables that connect to a MySQL database.
- 6 separate workbooks which contain static data that is updated manually periodically (copied and pasted from another source)
- 5 separate workbooks which contain dynamic tables that are linked to our MySQL database and update when opened.
Now I realise that this is probably where my issue is, however I have no idea how to fix it. You do not seem to be able to connect to a MySQL database directly within the PowerPivot window itself so there is no way to generate and update tables without
first creating them either in a worksheet or separate workbook (as far as I know). If I try to create all of the tables directly within the single workbook containing the Data Model I get performance and crashing issues hence why I separate tables into
individual workbooks.
Any advice on how to improve performance would be tremendously appreciated. I'm new and keen to learn, I'm aware this set-up is far from best practice.
Hardware wise I am using:
- Windows 8 64-bit
- Excel 2013 64-bit
- Intel Core i7 processor
- 6 GB Ram
Thanks,
James

Darren,
I think the point I was making is its in memory, geez... BTW what do all applications do when they run out of paged memory, if PowerPivot is using all available memory then wouldn't this force the other applications to use Virtual or essentially write
back and forth to the disks? I think Virtual memory white to disk ??, lol Also, there are parts if the architecture of Excel 2013 that when importing data into PowerPivot require memory and when working in SharePoint the PowerPivot data is cached to disk
unless recently refreshed... But this conversation isn't help the James who asked the question and as much as I would love to continue its become a little boring..
Hi James,
If you download one the ODBC MySQL Connectors
http://dev.mysql.com/downloads/connector/odbc/ and I believe yours is the first one for x64 systems and connect directly to the data you should be able to reduce the number of workbooks your opening and if you notice in the following graphic these
connection are automatically refreshed by default, the parts in red are the differences between PowerPivot 2010 and 2013
You should notice a lot of improvement especially when refreshing data please let us know how it goes...
After registering the ODBC Driver
Click Add. on the User-DSN sheet, choose the “MySQL ODBC 5.x driver”, fill in the credentials, choose a database (from the select menu) and a data source name and you’re done.
Back in Excel you go on the PowerPivot section of the ribbon and open the PowerPivot window (the green icon on the left side). In the ‘Home’ section of that window you will see a small gray cylindrical symbol (the international
symbol for “database”) which will suggest to you different data sources to choose from. Take the one where it says “ODBC”.
In the next dialog you click on create, choose the adapter, and then Ok. Back in the assistant you can check the connection and proceed.
Now you have the choice between importing the data from tables using the import assistant or Query depends on your skillset..
Cheers,
Ivan
Ivan Sanders <a href="http://www.linkedin.com/in/iasanders">My LinkedIn </a> , <a href="http://msmvps.com/blogs/ivansanders">My Blog</a>, <a href="http://twitter.com/iasanders"> @iasanders</a>,
<a href="http://shop.oreilly.com/product/0790145372703.do">BI in SP2013</a>, <a href="http://sharepointdemobuilds.codeplex.com">SP2013 Content Packs</a>.

Malfunction when adding/modifying "contact"

When modifying a contact, fields "name" and "first name" do not appear anymore (but existing data is retained)
iPhone 4 C + iOs 7

J.P. D. wrote:
When modifying a contact, fields "name" and "first name" do not appear anymore (but existing data is retained)
iPhone 4 C + iOs 7
Before you try anything as drastic as restoring your phone, try simply resetting it by pressing and holding the Home and power buttons until the apple appears on the screen.

How to create a second portalgroup when adding a User to a coll.role

Hi there,
when the system creates a room, it creates also the portal group room_***_main.
Is it possible, to let the system create a second group like room_***_main-adv automatically?
We want to add a new template with a second document folder in a collaboration template. This second folder should be protected by a new collaboration- and also by a new portal-group.
Documents without a second protected portal group would be found in the Enterprise Search, but they shouldn't !
Now we want that the system add the new portalgroup to a member automatically, when the member gets the coll.-role for this folder.
Is there a solution for this problem?
Thanks a lot.

Hi,
you may want to try the SOA forum with BPM related questions. If you create an empty row then - if this row has validation applied - you of cource need to delete it. However, if you add a new row after the empty row then you need to find this row by its index or similar as it no longer is the current row (so just using the delete operation of the DC doesn't work)
Frank

Elements of WebUI by authorization object in user roles?

Hi all,
we are currently setting up a SNC scenario with SCM 5.1. I have some information about how to change the WebUI for the Responsive Replenishment, but by now I can only change it for all users. I would like to link certain Web buttons and screens to user authorization roles, so some users get buttons others can't see, depending on their roles.
Has anyone a clue for me if this is possible, and how I can implement this, or where I can documentation about it?
Thanks for any help.
Best regards,
Timo

Hi Timo,
If you are intending to change a few elements in the WebUI programatically, then you could restrict the changes on the basis of the role. (is for a supplier or a customer)
I do believe that you might to be needing to do the changes in the corresponding ICH Data matrix model business logic class.
Here
The attribute P_DATAICHDM->S_CBINFO-APPDATAID holds the value corresponding to the application and the role thats accessing the screen.
I do believe , in your situation, the appdataid for a customer would be 'RPLRRC' and for a suppler would be 'RPLRRS'. However, you would need to cross verify this.
All you need to do now, is to check the value of these attributes which have been set and code for the UI Changes accordingly.
There could be other simpler approaches , by means of configuring too, depending on the nature of your change. I am not really sure. I just suggested one thing that worked in my case.
Cheers,
Rashmi.

Manually added Authorization object

All ,
What is the impact for manually added authorization objects in the roles after the system upgrade??

My 2 cents, since I don't see any replies.
I try to avoid manual auth objects on a role as much as possible. One problem with manually auth object is in PFCG, it will not give a reference to what transaction the auth object came from. Unless thoroughly documented this can be an audit issue.
In regards to upgrades, I don't this it will have any affect. It is usually the tcodes that are affected.

Trouble when adding / modifying authorization objects in a role through ERM

Similar Messages

Maybe you are looking for