User does not have authorization.

The end-user gets an error message "PM:xxx No authorization for Plant XXXX in the TCODE screen".
I have debugged the TCODE, and no authorization checks are made within the program.
How do I check if the user is setup correctly? FYI - I do not have authorization to SU01.

We have been going back-and-forth with end-user and Basis to fix this issue.
The SU53 screen shot was submitted to Basis and they claim the user's autorization profile is correct. Is it possible for one authorization profile to interfere with another authorization profile?? Because the profile under contention should allow add/change/delete material classification attributes. But there exists another authorization profile against the same user that give him only display rights.
Another clarification from the user - Initial stand was that he saw the 'No authorizatoin for plant xxxx' message when he typed in the TCODE (which made me look for authorization checks in PBO module of the screen). But now, he states that the error message is displayed when he hits the ENTER key (so, the check is being made in PAI module, is it??).

Similar Messages

User does not have authorization for InfoProvider

Hi,
We are in BI 7.0 and want to display the data in the cube that I created and loaded data to. In RSA1, I am do a right click on the cube and select "display data". I am getting to selection screen and after selecting the output fields and executing, I am getting the following error:
User XXX does not have authorization for InfoProvider ZFREDC
The long text is like this:
You do not have sufficient authorization
Message no. EYE007
Diagnosis
You do not have sufficient authorization for the requested data records.
Procedure
Either select other data or get the required authorizations from your administrator.
I did a authorization check in SU53 after I got the error and it says the last authorization check was successful.
Can somebody suggest me what to do. If there are any authorization objects that I need to have in my role?
Thanks.

Hi,
Be sure to have authorisation object S_RS_ICUBE assigned with at least activity 03 (execute) and subobject data and agregate for the respective cube(s) or infoarea(s).
Regards, Patrick Rieken.
Message was edited by:
Patrick Rieken - BI-Formance B.V.

User XIRWBUSER does not have authorization for message monitoring

Hi All,
In the Runtime WorkBench, when I choose the Message Monitoring, display Messages from Component Adapter Engine from Database, when I click on the start button, it shows me a error "User XIRWBUSER does not have authorization for message monitoring", how can I configure my xi to get the authorization for message monitoring of Adapter Engine? Thanks!
Regards,
Nick

Hi Nick,
Transaction PFCG. Enter the role you wish to check (SAP_XI_RWB_SERV_USER) and click on the display button.
Check that the Authorizations tab is green. If it is not, then you might need to generate the auth profile. Also check the User tab. If it is not green, then you should do a User Comparison as well (just click on the button inside the tab).
SAP Help URL:
http://help.sap.com/saphelp_nw04s/helpdata/en/52/67151e439b11d1896f0000e8322d00/frameset.htm
Cheers
Manish

'The logged-on user does not have permission to use this object'

Hello everyone,
I am getting the message 'The logged-on user does not have permission to use this object' while saving the Sales Order. I am logging in as a CRM user. There is an addon also running on the server, that saves some data into a user defined table when the Sales Order is saved. Is there any authoisation for users to access user defined tables.
Regards,
William

hi William,
this is an Authorization issue. provide the user with authorization on your UDT. Definition of user authorization can be found in Administration -- >> System Initialization -->> Authorizations -->> Additional Authorization Creator.... if already defined from here you can fined the additional authorization from the General authorization window.
regards,
Fidel

Error Message' "The loged on user does not have permission to use this obje

The loged on user does not have permission to use this object-
I am entering a Sales order, which is customized, when I add the Sales order this system imformation appears.
The user has a pro-license and authorizations to all AR
Can someone tell me what my problem might be?

Thank you for your help

Hr_maintain_masterdata showing an infotype that the user does not have auth

subject: hr_maintain_masterdata showing an infotype that the user does not have authorisation for
Hi all,
I've a user account that's meant to perform staffing, based on the actual HR role. The system is also set up with an infogroup that contains infotypes 0000, 0001, 0006, 0185, XYZ and other infotypes; XYZ representing an actual infotype. The HR role is not supposed to have this infotype XYZ.
When PA40 is used, infotype XYZ will be skipped, as the user account do not have authorisation for it. I could then proceed to create the record.
When the fm: hr_maintain_masterdata is used, I was prompted that I do not have authorisation for infotype XYZ.
I have setup my fm with the mininum amount of values, as indicated below.
I did not populate a table for "proposed_values" so the infotypes called were due to the actions of the infogroup.
fm: hr_maintain_masterdata
pernr = 01234567
massn = 01          (new staff)
actio = INS          (insert record)
tclas = A          (master record)
begda = 01.09.2010
endda = 31.12.9999
werks = myCompanyPlant
dialog_mode = 2     (online)
luw_mode = 1          (commit, if no errors encountered)
no_existance_check = X
Q. Is there any way to let the function module call the infotypes, with authorisation checks, as what PA40 is doing?
Your guidance would be appreciated.
Thank you,
James Wong

A behaviour that has been observed was that, after infotype 0185 was saved, the function module throws me back to infotype 0000, citing, "No authorization to maintain XYZ exists". Data that I had populated to the screen, either via the FM or by manual input were cleared. If I skip the next 4 screens, I'll arrive at the Infotype after XYZ, with the data populated. Subsequent infotypes also have their data filled in.
Once I complete the sequence, the personnel record will be created. Upon examination, the frist 4 screens that were skipped in the 2nd pass contains data that were entered in the 1st pass.
My question, as posted in the original post, is why infotype XYZ is triggered by the function module, as the staffing account does not hae access for it. If I repeat the process using PA40, the infotype is skipped accordingly.
Any help would be appreciated.
Thank you,
James Wong,

System Identity User does not have privileges in ACS

Hello Everyone!!
We have CiscoWorks integrated with ACS, the authentication works but the authorization does not. I check and we have the role System Administration for this user in ACS for every applications like; Common Services, RME, DFM, IPM, Campus Manager, etc.
However in the Common Services < Home < Security< ACS appears the integration in red color and means that the System Identity User does not have all the privileges in ACS.
Any idea??
Kathy

Login as the same user, use the same responsibility and then try to do the exact same update (item/field/value) using the screen.
Then use the api.
Make sure you add a line to set the context properly before calling ego_item_pub.
I did not see that in your code.
something like
fnd_client_info.setup_client_info(&appl_id, &resp_id, &user_id) -- replace the variables with the appropriate value
Hope this helps,
Sandeep Gandhi

"The Loged On user does not have permission to use this object" error

Hi
I've created a form that is used by a customer which allows for certain draft documents to be approved and then once approved they are created. The problem that I am having is that when the users attempt to update the changes on the form an error is logged, which is shown below:
"Error: -3000
The Loged On user does not have permission to use this object
System.Runtime.InteropServices.COMException (0xFFFFF448): The Loged On user does not have permission to use this object"
Once the update button is pressed then a User Defined Table and Drafts are both updated with the relevant modified UDFs from the form.
If I log onto their system then I don't seem to get any issues. To me it looks like a user authorisation problem but the ones who have used the form seem to have the relevant licences.
Do you have any idea why this error could be occuring?
Thanks a lot.
Steve

Hi,
Go to Administration --> System Initlization > Authorizations> General Authorizations not expand all and check if the service call is given full *Read & Write * rights to the required user.
If not then give full rights and check the add on.
Hope it helps,
Vasu Natari.

While deploying to another server from RM client using build definition i got below error "Package location does not exist or deployer user does not have access"

We have installed RM client in the POC server .
Installed Deployment Agent in Dev server .
We created Configuration stages for POC->Dev.
We created a template with x copy deployer and selected source as build definition.
While releasing we faced following issue ,
The release was success in POC (Where RM client is installed), but in DEV environment (Which is different server)it got rejected because of the error
"Package location(Path) does not exist or deployer user does not have access"

Hi Dhamayandhi
There is quite a bit to do to get RM working successfully. I have a soup-to-nuts guide on implementing continuous delivery with TFS and RM
here.
Cheers - Graham
Blog:
http://pleasereleaseme.net LinkedIn:

The loged on user does not have permission to use this object'

A professional license user currently has Authorisation to all Customer BPs and Sales Documents.
When creating a random Sales Order, the error message
'Create POs(): The loged on user does not have permission to use this object'
is occuring. This is not occuring for all Sales Orders, this is occuring randomly.
Note that the Purchase Orders Button in the Logsitics tab in the sales order is NOT selected.
Cheers Lisa

hi lisa
there could be some changes in transaction notification from your side if there are any i would request you to please comment all the changes and then try saving the document it would definately go ahead as there has to be some change in the stored procedure ,
Regards,
Manish

Error msg: Current user does not have privileges to perform product Activation

I am running Adobe Photoshop CS 8.0 on Windows Home Vista platform.
I keep getting this error message when I try to open Photoshop:
Current user does not have privileges to perform product activation. Run this application from a user account with administrative privileges or contact your system administrator.
I am the only owner & user of this software. I have re-installed the SW once (full install), and the error message went away for a while.
Now it's come back.
What do I do now?

2 options:
Either disable UAC (User Access Controls) or run the application with Administrator rights.

The user does not have permission to perform the operation

Hi,
Configuration: JES Q405. Solaris 10 x86.
My customer initially installed JES (Portal + AM + DS) on the same box.
Now, they have a change in their requirement. They want DS to run dedicatedly in another box.
I have successfully installed a fresh instance of DS in the new box with the same domain name (thus maintaining the same dn). I have copied over 99user.ldif and exported all the data from the original DS in the old box.
Everything is running fine. DS in the new box is able to function properly.
On the Portal and AM side, I have changed the following file:
1. AMConfig.properties
2. serverconfig.xml
3. PSConfig.properties
I have also changed the Primary LDAP entry in iPlanetAMAuthLDAPService, iPlanetAMAuthMembershipService, and iPlanetAMPolicyConfigService.
However, when I started AM (which is running on Sun Web Server), I got the following error message:
------------------- in /var/opt/SUNWam/debug/amSDK ---------------------------
05/01/2006 04:46:43:324 PM SGT: Thread[main,5,main]
ConfigManager->Constructor: root DN dc=sg,dc=com
05/01/2006 04:46:43:403 PM SGT: Thread[main,5,main]
Invoking _ldapPool.getConnection()
05/01/2006 04:46:43:403 PM SGT: Thread[main,5,main]
Got Connection : LDAPConnection {ldap://sg-dsq405.sg.com:389 ldapVersion:3 bindDN:"cn=puser,ou=DSAME
Users,dc=sg,dc=com"}
05/01/2006 04:46:43:410 PM SGT: Thread[main,5,main]
Invoking _ldapPool.close(conn) : LDAPConnection {ldap://sg-dsq405.sg.com:389 ldapVersion:3 bindDN:"c
n=puser,ou=DSAME Users,dc=sg,dc=com"}
05/01/2006 04:46:43:411 PM SGT: Thread[main,5,main]
Released Connection : LDAPConnection {ldap://sg-dsq405.sg.com:389 ldapVersion:3 bindDN:"cn=puser,ou=
DSAME Users,dc=sg,dc=com"}
05/01/2006 04:46:43:411 PM SGT: Thread[main,5,main]
ERROR: ConfigManager->Constructor: Caught exception Message:The user does not have permission to per
form the operation.
------------------------------------ end --------------------------------------------------
-------------------------- in /var/opt/SUNWam/debug/amAuth ---------------------
05/01/2006 04:47:21:252 PM SGT: Thread[main,5,main]
Directory Host: sg-dsq405.sg.com
Directory PORT : 389
05/01/2006 04:47:21:298 PM SGT: Thread[main,5,main]
AuthD initializing
05/01/2006 04:47:21:610 PM SGT: Thread[main,5,main]
ERROR: AuthD failed to get auth session
05/01/2006 04:47:21:688 PM SGT: Thread[main,5,main]
ERROR: AuthD init()
com.iplanet.dpro.session.SessionException: AuthD failed to get auth session
at com.sun.identity.authentication.service.AuthD.initAuthSessions(AuthD.java:709)
at com.sun.identity.authentication.service.AuthD.<init>(AuthD.java:229)
at com.sun.identity.authentication.service.AuthD.getAuth(AuthD.java:494)
at com.sun.identity.authentication.UI.LoginLogoutMapping.init(LoginLogoutMapping.java:71)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:921)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:813)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3478)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:3760)
at com.iplanet.ias.web.WebModule.start(WebModule.java:251)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:652)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:355)
at org.apache.catalina.startup.Embedded.start(Embedded.java:995)
at com.iplanet.ias.web.WebContainer.start(WebContainer.java:431)
at com.iplanet.ias.web.WebContainer.startInstance(WebContainer.java:500)
at com.iplanet.ias.server.J2EERunner.confPostInit(J2EERunner.java:161)
----------------------------------------- end --------------------------------------------------
Any idea how to solve this problem? Thanks in advance!
justCheeChong
Message was edited by:
justCheeChong

check if the new DS instance has all the AM required ACI's.

List the items the user does not have access to.

I have a requirement to show the user a list of all the libraries of a site with the number of items in each even if the user does not have rights to the library. (the link or button will be grayed out if the user has no access)
I am looking for opinions on how to do it with the best performance possible.
The first candidate is to first enumerate all the items in all the libraries with elevated then do the same as the logon user and compare the collections.
The drawback is performance so maybe rely on the assumption that the overall content of the site does not change often so keep the collection from the elevated run in cache (with configurable lifetime) and only run as user on page load and compare with the
cache.
I am sure there is probably a better way so let's here it. can we take advantage of search?
This is on SP2013 but we are not using apps for unrelated reasons. We can use server object model.
Thank you all.
Ofer Gal

Hi,
I believe Search cant be used since Search is Security Trimmed. Search will not return the result if user dosent have the permission.
Thanks! Best Regards, Prasham Sabadra http://prashamsabadra.blogspot.in

Cannot delegate Reporting Services Web access to domain user / group, User does not have required permissions

Hi
I have an SCCM 2012 SP1 CU3 installation on a Server 2008 R2 + SQL 2008 R2.
I'm having trouble delegating Reporting Services Web Access to a standard domain user.
I have followed the instructions from these blogs:
http://blog.coretech.dk/kea/creating-the-reporting-user-role-in-configmgr-2012/
http://www.wolffhaven45.com/blog/sccm/assigning-users-to-configmgr-reportusers-group-in-sccm-2012/
No matter how I try, I cannot get the reports to show for a standard domain user. In the console no reports are showing and in the web access I get
"User domain\user does not have required permissions........"
The only thing that is consistenly working when I test is to put the AD Group on the Security Role "Full Administrator".
Then everything will show up.
Any ideas on how to troubleshoot this?

Thanks everyone for helping me with tips. I have now solved the problem. It was the permissions from SCCM that did not replicate to the Reporting Server.
In srsrp.log I got these error messages:
Could not retrieve the reporting service name for instance 'MSSQLSERVER'
Invalid class
Could not stop the reporting serviceAfter googling a litte I found these 2 sites with similiar problems:http://social.technet.microsoft.com/Forums/en-US/d4a7f93a-506f-4e3f-b5fc-bd2b087277da/ssrs-permissions-do-not-add?forum=configmanagergeneral
http://www.microtom.net/microsoft-system-center/software-distribution/sccm-2012-reporting-services-do-not-install
So I ran the command for SQL 2008 R2: mofcomp.exe C:\Program Files (x86)\Microsoft SQL Server\100\Shared\sqlmgmproviderxpsp2up.mof
and BAAM, everything started to work =)
/ALX

IDocumentQuery.Execute() method throws user does not have edit permissions exception

I'm trying to query a document folder for all of its containing documents. Its a basic query like this:
IPortletContext PortletContext = PortletContextFactory.CreatePortletContext(Request,Response);IRemoteSession PTSession;PTSession = PortletContext.GetRemotePortalSession();IDocumentManager documentManager = PTSession.GetDocumentManager();
IDocumentQuery documentQuery = documentManager.CreateQuery(FolderID); documentQuery.SetSortProperty(ObjectProperty.Name);IObjectQuery queryResults = documentQuery.Execute();
When I'm logged into the portal as an administrator, everything works fine. However if I'm logged in as a "regular" user, I get this exception when calling the Execute() method:
Plumtree.Remote.PRC.PortalException: Exception of type Plumtree.Remote.PRC.PortalException was thrown. ---> System.Web.Services.Protocols.SoapException: Server was unable to process request. --> Access denied: Current user does not have edit permission
I'm sending the Login Token to the portlet. Now I've tried giving the user Edit rights on the document folder as well as Edit the Knowledge Directory rights in the Activity Manager, but neither gets rid of the exception. I'm not sure what other "Edit" permissions to check. I don't even see why the user would need "Edit" permission to anything in the first place since the Execute() method simply returns an IObjectQuery that doesn't have any ability to make changes to any objects. I know that I could use the SearchFactory interface, but I wanted the results to be real time. Any help would be much appreciated. Thanks!
Jimmy

The problem here is that the query is created with default settings to show unapproved documents -- only users with edit access can see unapproved documents. Add the bold line to your code and it will work.
IDocumentManager docManager = prcSession.GetDocumentManager();IDocumentQuery docQuery = docManager.CreateQuery(iFolderID);docQuery.SetShowUnapproved(false);IObjectQuery queryResults = docQuery.Execute()

User does not have authorization.

Similar Messages

Maybe you are looking for