User administration - read rights for customizing

Hello,
is there s. th. like a only-read-right for the whole customizing img or do I have to get the rights for all the different t-codes inside the img?
Thanks a lot in advance,
Hansi

Hi Mark,
s.th. like this. The point is I'm new to right management. But there must be s.th. like a profile with which I get the right to see all the transactions related to the img or not? Our admin is saying we have to specify which transactions we need exactly which is quiete annoying. Instead I need a possibility to say: "Give me read-rights for this profile" and I can look after the customizing myself... Is there a way???
Thanks a lot.
BR,
Hansi

Similar Messages

Reader rights for adding attachment

Hi ,
is it possible to apply reader rights for adding attachments when output pdf form in sap?
where can i find more document on controlling reader rights?
thanks and best regards.
Jun

Hi Jun,
here is a sample code for seting usage rights:
FORM use_rights
CHANGING p_pdf TYPE xstring.
DATA: l_fp           TYPE REF TO if_fp,
      l_pdfobj       TYPE REF TO if_fp_pdf_object,
      l_dest TYPE rfcdest.
MOVE cl_fp=>get_ads_connection( ) TO l_dest.
l_fp = cl_fp=>get_reference( ).
l_pdfobj = l_fp->create_pdf_object( connection = l_dest ).
l_pdfobj->set_document( pdfdata = l_pdf ).
DATA: lt_rights TYPE TFPURIGHT.
PERFORM my_usagerights CHANGING lt_rights.
l_pdfobj->set_usagerights( default_rights = space rights = lt_rights ).
l_pdfobj->execute( ).
l_pdfobj->get_document( IMPORTING pdfdata = l_pdf ).
ENDFORM.
FORM my_usagerights
    CHANGING pt_rights TYPE TFPURIGHT.
DATA: ls_rights LIKE LINE OF pt_rights.
REFRESH pt_rights.
ls_rights-right = if_fp_pdf_usage_rights=>formrights.
ls_rights-value = if_fp_pdf_usage_rights=>formright_fillin. "Ukladani
INSERT ls_rights INTO TABLE pt_rights.
ls_rights-value = if_fp_pdf_usage_rights=>formright_export. "Export XML
INSERT ls_rights INTO TABLE pt_rights.
ls_rights-value = if_fp_pdf_usage_rights=>formright_add.
INSERT ls_rights INTO TABLE pt_rights.
ls_rights-value = if_fp_pdf_usage_rights=>formright_delete.
INSERT ls_rights INTO TABLE pt_rights.
ls_rights-value = if_fp_pdf_usage_rights=>formright_submitstandalone.
INSERT ls_rights INTO TABLE pt_rights.
ls_rights-value = if_fp_pdf_usage_rights=>formright_spawntemplate.
INSERT ls_rights INTO TABLE pt_rights.
ls_rights-value = if_fp_pdf_usage_rights=>formright_online.
INSERT ls_rights INTO TABLE pt_rights.
ls_rights-right = if_fp_pdf_usage_rights=>signrights.
ls_rights-value = if_fp_pdf_usage_rights=>signright_modify.
INSERT ls_rights INTO TABLE pt_rights.
ls_rights-right = if_fp_pdf_usage_rights=>annotrights.
ls_rights-value = if_fp_pdf_usage_rights=>annotright_create.
INSERT ls_rights INTO TABLE pt_rights.
ls_rights-value = if_fp_pdf_usage_rights=>annotright_delete.
INSERT ls_rights INTO TABLE pt_rights.
ls_rights-value = if_fp_pdf_usage_rights=>annotright_modify.
INSERT ls_rights INTO TABLE pt_rights.
ls_rights-value = if_fp_pdf_usage_rights=>annotright_copy.
INSERT ls_rights INTO TABLE pt_rights.
ls_rights-value = if_fp_pdf_usage_rights=>annotright_import.
INSERT ls_rights INTO TABLE pt_rights.
ls_rights-value = if_fp_pdf_usage_rights=>annotright_export.
INSERT ls_rights INTO TABLE pt_rights.
ENDFORM.
Michal

Possible to make an item editable for certain users and read only for other

Is it possible to make an item editable for certain users and read only for others?
I've been able to accomplish this by taken the select statement that I used to define an authorization scheme, placing it in the Read Only condition of the item. However, I would like to simply reference the authorization scheme to utilize caching, and to help keep things cleaner for future maintenance.
Is it possible to reference an authorization scheme in an item condition similar to the way another item can be referenced by preceding it with a colon (i.e. :P1_First_Name)?

Thank you, your suggestion worked.
It would be nice on a future release of APEX if a drop-down box existed under the Ready Only section that would allow an existing Authorization Scheme to be selected or negated when applying the Read Only attribute to a form item.

Reading rights for another user

Hi,
I have a customer request who wants to have reading rights on tables which are used in a special workspace scheme.
He wants to compare the contents with an application he is working on.
Is it possible to assign only reading rights on defined tables in an apex workspace?
How can I install it?
Thank you in advance.
Best regards
GibsonLP

Hi all,
prolem is not solved yet.
Can anyone help, please?
Thank you
BR
GibsonLP

Can't get Administrator Privileges/Rights for Local Account in Administrators Group

I'm using a Custom Command Shell, and for now just booting to cmd.exe. I've done the following:
1) Added a LocalAccount under UserAccounts/LocalAccounts (pass 7) with Name, DisplayName, Password, Group
2) Entered "Administrators" as the LocalAccount/Group (yes, it's definitely spelled correctly.)
3) Set AutoLogon/Username to the Username created in Step 1, Enabled, LogonCount 9999, Password as per Step 1
4) Added the "Application Security" package and set EnableLUA=False.
The system boots after install, and it successfully logs in automatically to the command prompt. However, the user DOES NOT have Administrator privileges. For example, when trying to run Regsvr32 from the command prompt, I receive the following error message:
"dllregisterserver failed with error code 0x8002801c," which indicates some sort of privilege/rights issue.
At the command prompt, when I type Net User LocalUserWhoShouldBeAdmin, I get the following:
    Local Group Memberships
    Global Group Memberships   *None
Whereas when I type Net User Administrator, I get:
    Local Group Memberships    *Administrators
    Global Group Memberships   *None
What must I do to successfully give the local user Administrator rights?

Jamster,
I figured out the solution, but I'm not sure your problem is the same...
In my case, the problem was that the LocalAccount/Name was the same as the ComputerName. As a last resort, all I did was change the LocalAccount/Name to something other than the ComputerName, and voila, after re-installing the image the local account was
suddenly a member of Administrators. Crazy... you'd think they'd be able to tell the difference between the ComputerName and a local account name! In case anyone's wondering, it has nothing to do with the length of the local account Name (I tested that.)

User Exit or BADI For Customer Hierarchy Maintainence- VDH1N

Hi All,
I need User Exit or BADI for the Customer Hierarchy Maintainence VDH1N Tansaction.
I need to Capture all the Changes done to the Customer Hierarchy by the User in ECC.
Thanxs.
Swathi

Hi,
Follow these steps to find BADI...
1. Go to the TCode SE24 and enter CL_EXITHANDLER as object type.
2. In 'Display' mode, go to 'Methods' tab.
3. Double click the method 'Get Instance' to display it source code.
4. Set a breakpoint on 'CALL METHOD cl_exithandler => get_class_name_by_interface'.
5. Then run your transaction.
6. The screen will stop at this method.
7. Check the value of parameter 'EXIT_NAME'. It will show you the BADI for that transaction.

Create dump file with datapump, with read right for everybody

Hello,
I have a problem under Linux : I am creating dump files with datapump.
Those dump files are owned by a dba group, with no read access for users not in the dba group.
Is there a way that the datapump utility creates dump files with a read access given to any user ?
Franck

Unlike "exp", when using "expdp", the dumpfile is created by the server process. The server process is forked from the database instance. It inherits the umask settings that are present when the database instance is started.
(Therefore, the only way to change the permissions would be to change the umask for the oracle database server id and restart the database instance --- which is NOT what I would recommend).
umask is set so that all database files created (e.g. with CREATE TABLESPACE or ALTER TABLESPACE ADD DATAFILE) are created with "secure" permissions preventing others from overwriting them -- of course, this is relevant if your database files are on FileSystem.
Hemant K Chitale

Central User Administration Idoc's for a XI system

Hello,
We are setting up a Central User Administration (CUA) in Solution Manager. One of the systems that needs to be a child of this CUA is a SAP XI 2.0 system.
The distribution of the Users is done by IDocs.
Everything is working fine from the CUA to a SAP R/3 system.
But when we make the XI 2.0 a child all the IDoc's are caught by the XI IDoc adapter in stead of going directly to the IDoc inbound handler of the XI system.
Has anyone been able to send an IDoc to an XI 2.0 and bypassing the IDoc adapter and sending them directly to the XI IDoc Inbound handler?
Any kind of info will be greatly appriciated.
With kind regards,
Leon Boeijen

Hi Leon,
to bypass the IDoc Adapter for specific IDocs you can specify these IDocs using the report IDX_SELECT_IDOCTYPE_WITHOUT_IS.
Kind regards,
Andreas

One connection user with full rights for a bunch of schemas

How can I give all rights of one user to another without declaring each object privilege one by one? For my application I would like to devide the data to maintain into four different schemas to. Never the less I would like to connect to the db by one account and have full access to all of the four schemas. My client denies to give the connect user DBA rights. The connection user is not allowed to have "ANY" grants, either. But my application often creates tables, views etc. and drops it when they aren't usefull any more. So it is nearly impossible to manage the grants on each db object one by one. So, how can I give a user all rights for a bunch of others?

My program uses logical "firms" to allow separation of clients client data. Sounds like Row Level Security - or even Views - would be saving you some grief here.
The most dynamic created tables are used to optimize performance for (sub-)queries builded at runtime by the user. Do you really have benchmarks to prove that building tables through dynamic execution of DDL results in faster response times than plain queries? Are the query structures some various that temporary tables won't do?
Cheers, APC

Role for User Administrator(Read only)

Hi All,
I want to create a role just like the role ofUser Administrator.But I want to make it read only.I want that the end user can perform search operation,can see the locked user,can see the roles but can't delete the user.Basically ,they shouldn't able to do the modification.
Any suggestions will be appreciated.
Paritosh

I have only managed to do this by creating a role and assigning the relevant User Admin iViews to the role and then changing the End User Permissions on the role.
I assigned the ReadAll Premission. That did the trick for me.
Groups unfortunately require the manage_groups Permission, so we do not allow the viewing of groups.

Enable Reader Rights for Commenting and Markup in Acrobat X Pro?

I am sure there is a nice long thread somewhere on this but I cannot find the old "Enable for Commenting and Review" in Acrobat X Pro (Windows 7, 32 bit). I get basic comments (sticky and highlight) but i need to make a PDF where my Reader X users can make all the comments and markups. I also tried doing the Send for Review task and it still did not have all the tools in Reader X.

File > Save As > Reader Extended PDF > Enable Commenting & Measuring

Create user with read access for all tables SAP SID .*

Hello all,
could you please help me ? I would like to grant select privilege on all tables SAP<SID>.* for newly created user.
I have created standard database user (not exclusive).
I`m able to grant select for individual tables, but I would like to grant select for this user on all SAP<SID>
schema in simplier way
But as far as I know, the schema`s owner name must be different then schema name.
Any idea please ?
Thank you.
Pavol

create user <user_name> identified by <password> <options>;
grant read on all tables:-
CREATE OR REPLACE PROCEDURE GRANT_SELECT AS
CURSOR ut_cur IS
SELECT table_name
FROM user_tables;
RetVal NUMBER;
sCursor INT;
sqlstr VARCHAR2(250);
BEGIN
FOR ut_rec IN user_tabs_cur;
LOOP
sqlstr := 'GRANT SELECT ON '|| ut_rec.table_name
|| ' TO <user_name>';
sCursor := dbms_sql.open_cursor;
dbms_sql.parse(sCursor,sqlstr, dbms_sql.native);
RetVal := dbms_sql.execute(sCursor);
dbms_sql.close_cursor(sCursor);
END LOOP;
END grant_select;
Edited by: varun4dba on Jan 18, 2011 4:13 PM

How to apply reader rights for adding comments and marks?

Hi gurus,
is it possible to allow user to use the comments and marks tools when working with interactive form?
thanks and best regards.
Jun

hi,
when you run the application .
when your pdf gets displayed.
in the acrobat reader itself, in the acrobat toolbar....
there is a colorful button<option> that has a cloud, a ^ sign, and a dialog box like graphics.
when you click on that it has several options for commenting.
check it out i have never worked on it though.
i hope this helps,
regards,
-ag.

How can I avoid the need for Administrator rights for open registry key.vi

Dear wire workers.
I would like to do an EXCEL export.
Therefore I like to check if EXCEL is installed or not.
I use 'open registry key.vi' and read out the Excel\InstallRoot.
If there is an installed EXCEL than I export the data using ActiveX.
Everything works like a charm with LV 8.5.
The problem I have is that 'open registry key.vi' useses RegOpenKeyExA from the Advapi32.dll.
RegOpenKeyEx does, in fact, create a non-existing key and returns 0 (ERROR_SUCCESS?).
LONG lRegResult = RegOpenKeyEx(HKEY_CLASSES_ROOT, m_RegSubKey, 0, KEY_QUERY_VALUE + KEY_WRITE, &hkRegistry);
Successfully opens or creates m_RegSubKey under HKEY_CLASSES_ROOT.
Is there a way aroun this call?
In fact you need administrator rights to do this call because of the try to write a non exsisting key.
In my case this avoids the EXCEL export and any kind of registry access from LabVIEW without administrator rights.
:-) Who the hell has done this ;-)
All ideas are welcome
With kind regards
Martin Kunze
KDI Digital Instrumentation.com
e-mail: [email protected]
Tel: +49 (0)441 9490852

Hi Martin
Did you try to wire a "KEY_READ" constant to the security access mask input of the open registry key VI? I had a similar problem, if you just need to read a key or check if it's present use read access only, that should work.
Hope this helps,
Daniel

GetItemData integration api: unable to read data for custom item

Hello,
I am trying to retrieve the data of an custom item via the getItemData api but i am gett the error message
"Not implemented for this item type"
I checked the api documentation, the list of supported item types include custom methods.
Is there any thing that i need to maintain for the custom method so that i can read the data stored by it using the getItemData api.
or is it simply not possible to read custom item data.
Thanks for the help,
Regards,
Saurav

Hi Ruediger,
Thanks for the reply.
To test the getItemData API i have implemented the hello world custom method example (java script).
I created an item using the UI and edidted the content.
when i try to read the saved data using the api i am getting the message
encountered an error:
Server returned HTTP response code: 400 for URL: https://streamwork.com/v1/items/5EXAbr-TgVCJV1qgL8-g1W/item_data?
<?xml version="1.0" encoding="UTF-8"?>
<error>
<http_status>400 Bad Request</http_status>
<message>Not implemented for this item type.</message>
</error>
When i try to read the data of a text item using the same API I am getting the correct response
<text_item>
<text_content><p>Hello testing</p></text_content>
</text_item>
So i was wondering how i can implement the getItemData for my custom method.
Thanks and regards,
Saurav.

User administration - read rights for customizing

Similar Messages

Maybe you are looking for