User Level Data Restriction in OBIEE

Hi Experts,
Need your help in implementing the below logic in OBIEE.
I have a requirement where user needs to view only particular data. Say for example ,
UserA   Bangalore
UserB   Delhi
UserC   Mumbai
Once User A logins he / she should be able to view only Bangalore and the same follows with the other users.
I have this User and area/city relation stored in a table.
Please let me know how can I achieve this.
I have these user created and I am unable to establish a relation between the user and the city .
Please let me know your suggestions on how can I implement this.
Appreciate your immediate response.
Regards,
Veena A

Hi,
Detailed description is as follows
1. Create 3 users -> userA, userB, userC from Manage->Security->Users in Administration Tool.
2. Create Intialization Block from Manage->Variables->Intialization Block right click on white space in Administration Tool. Give a name to it
3. Click on Edit Data Source in Intialization Block that you have created and write the query
SELECT 'user_city', column of city FROM table_name which has city column.
4. Create 4 session variables USER, USER_CITY, GROUP, LOG_LEVEL(Note : The order of creation of variables should be same). for USER , LOG_LEVEL and GROUP an alert will come saying that these varibles are of special purpose, click on Yes to create it.
5. Go to Manage->Security->Users in Administration Tool and double click on userA->Permissions click on Filters tab and click on Add button. Select the table which has city column. click on '...' button next to Business Model Filter Column to get the Expression Builder - Security Filter.
6. In the Expression builder select logical tables, and then select table which has city column and click on Insert button. Click on '=' in Expression builder. Click on Session Variables. double click on user_city session variable. (for example : Employee_Manager."Locations Ma"."Loc Name" = VALUEOF(NQ_SESSION."UserLocation")) and then click on ok. save reporsitory. restart BI server from services and launch the BI Answers and login as userA and check the city.
For more details visit
http://www.oracle.com/technology/obe/obe_bi/bi_ee_1013/bi_admin/biadmin.html
Scroll down to topic -> Using Initialization Blocks and Variables
Thanks and Regards,
Mahesh
Edited by: magu on Apr 27, 2009 3:10 PM

Similar Messages

AUTHORIZATION ISSUE: cube level data restriction in BI

Hi all,
I have few cubes and ODS which are containing data. The requirement is to restrict the cube level data.
Eg : we have option to see the cube data in RSA1( ADMIN WORKBENCH).Right click on cube manage data.
the requirement is to restrict to see the data company code = 111(only)
Likewise for few users only company code = 222.
If they try to see other than 111, they should get u201Cno authorization messageu201D.
Cube data
company code         distribution channel         account     amount
111                         10                                   10002     100
222                        20                                      10002     200
333                        30                                       10002     300
444                        10                                      10002     400
1111                20                                       10002     500
1111                30                                      10002     600
2222               30                                           10002     700
Thanks in advance.
Jo

Hi MaikI,
Thank for the inputs.
Actually i want restrict the data based on the ANALYSIS AUTHORIZATION - 0TCAIPROV.
I want to give s_rs_comp-provider value *, and i want to control the query (data) access through analysis authorization. i want to create zanalysisauth which contains 0TCAIPROV = $variable.
variable is populated with one/two provider values at runtime .
based on the runtime variable population user should get access.
But with this implementation user is able to open all queries.where i am going wrong? how can i do this?
Regards,
Joseph

Ideas for Providing User Level Data Backup and Restore

I'm looking for ideas for implementing a user level application data backup and restore in an Apex app.
What would be great is to have a user be provided an export file and a way to import this file. A bit overkill but hopefully never needed.
Another option that is perfectly doable is a report that simply provides a means to create an export of the data. Since I already have an interface I can use an export to interface an export.
Any thoughts?
Hopefully I'm missing something already there for an end user to use.

jlincoln wrote:
"Do you mean "export" and "import" colloquially, or in the specific sense of the exp/imp/datapump utilities?"': I mean as in imp/exp Oracle utilities. Generally speaking, it would be neat to be able to export and import via an Apex an application. In this hosted environment I don't have that access but would this be a bad idea if you don't care about the existing data in the schema in which the data resides?I can envisage a mechanism using <tt>exp/imp</tt>, but since it requires <tt>dbms_scheduler</tt> external jobs and access to the file system it's highly unlikely to be possible in a hosted environment. (Unless you're doing the hosting?)
Backup: Necessary for piece of mind and flexibility. I am working on a VB/Access user who does this today to get to the point when they can be comfortable with the backups occurring regularly and by the hosting site's DBA group.
Restore: Like I said. I am working on a VB/Access user who does this today to get to the point when they can be comfortable with the backups occurring regularly and by the hosting site's DBA group. This is a very small data set. A restore would simply remove existing data and replace it with the new data.My opinion is that time would be better spent working on the user rather than a redundant backup and restore feature. Involve them in a disaster recovery exercise with whoever is hosting the environment to prove that their data is safe. Normally the inclusion of data in regular, effective database backups is sold as a major feature of APEX solutions.
"What about security/privacy when this data ends up in uncontrolled environments?": I don't understand the point of this question. The data should not end up in uncontrolled environments. Just like the data in the database or its backups.Again, having data in a central, shared location protected by multiple levels of application, database, and OS security is usually seen as a plus for APEX over VB/Access. Exporting the data in toto to a PC/laptop that can be stolen or lost, and where it can be copied to USB drives/phones/email loses this protection.
User Level: Because the end user must have access to the backup and restore mechanisms of the application.
Application Data: The application data. Less than 10MB. Very small. It can be exported in a flat file downloaded by the end user. This file can then be used to upload and import via an existing application interface. For example.
"I'm struggling to parse this for meaning.": When I say I have an existing interface I am referring to a program residing in the Apex application that will take data from a flat table structure (i.e. interface table), validate the data, derive data, and load into the target table structure.Other than the report export capability linked to above, there's nothing built-in to APEX that comes close to your requirement. If the data is simple enough that it can be handled in such a report, and you have a process that can read and recreate this export, then you have your backup/restore capability. If the data can't be handled in a simple report, then you'll need a more complex PL/SQL process to generate the file.

User Level PO Restrictions In Orcle PO Standard Form

Hi All,
I need to restrict the PO's in Oracle Standard Form. Suppose Say we have 3 users.
USER1
USER2
USER3
The PO's Created by USER1 should not able to query by USER2 and USER3. And the PO's Created by USER2 and USER3 should not able to query by USER1. But the PO'S Created by USER2 and USER3 can be queried among them.
What is the possible methods and steps to meet the above requirement.
Please Help and give the solution,
Regards,
Ameen

Use standard exit available for PO release M06E0004.
This enhancement allows you to change the communication structure for
determining the release strategy for external purchasing documents.
The following user fields are available in CEKKO, which you can fill:
USRC1
USRC2
USRN1
USRN2
The communication structure CEKKOZZ is also available, enabling you to
use your own fields.
BR

Changing The Validity Dates In Org Model in CRM- User Level

Hi
How can we restrict the Validity Dates in Organisation Structure at User Level.
I need that the user should be given some specific dates<b> ( Valid till or assigned till )</b> while assigning in the org. And it should be visible always in the Org Model.
We tried using Delimited Date Function, but the User gets ellapsed if the Validity is expired.With the business point of view, <b>the requirement is that all user should be listed in Org model with respect to any dates.this would mean that if a user is terminated we would want to change the Valid till date in the Org</b>

Hi Amrita,
Business partner number and Object ID is automatically determines by system when creating a org unit.
I dont find any configuration to create org unit with your own BP number and object ID. You have option to make repairs to the existing org unit.
Please find the below path to repair the org unit
IMG -> CRM -> Master Data -> Business partner -> Integration Business partner -Org management -> Create Business partner initially
Select the org unit and execute to get all the org units.
You can select the org units with errors /warnings and click on start repair to get automatic assignment of BP.
Hope it helps
Reward points if it helps
Regards,
Madhu

User exit to change item level data in purchase order

Hi,
Can anyone let me know the user exit to change item level data in purchase order . there is a badi ME_PROCESS_PO_CUST for this but the issue is its method process_item gets triggered only when the item is changed. My requirment is
For purchase order document types u201CZSOu201D and u201CZCOu201D, where the purchase order is a u201CLimits Orderu201D only i.e. no materials or services on the purchase order, the print price indicator field should be set to u201Cblanku201D (unchecked). now i cant use ME_PROCESS_PO_CUST because process_item wont get triggered if there is no change in itemlevel data.
Regards,
Rahul

Hi Rahul,
Probably EXIT_SAPLMEKO_002.
hope it helps,
Edgar

Comman to take user level backup(tables and data in table for a particular)

Hi ,
I need to create a sql script to take user level back up i.e i need to take back up ,(export the tables and data in those tables in particular user) to my pc..
i am able to do the same from unix command ,but not able to do the samq in sql script
Please advice.

Hi ,
I need to create a sql script to take user level back up i.e i need to export the tables and data in those tables in particular user to my pc..
i am able to do the same from unix command ,but not able to do the samq in sql script
Please advice

Restricting Authorizations to Variants at User level

Hi SAPians,
Can you help me to know how can I restrict variants to be displayed for particular users.?
Example: I am creating 5 variants in EMMACL transaction and give authorizations for the users only to particular Variants as below:
1. Variant1 --> Can be access by only users ERP-EHK, ERP-SAP & ERP-EJS
2. Variant2 --> Can be access by only users ERP-EAS & ERP-HJG.
3. Variant3 --> Can be access by only user ERP-EMM
4. Variant4 --> Can be access by only users ERP-EHK & ERP-UJY
5. Variant5 --> Can be access by only user ERP-EAS
Let me know how I can achieve the above requirement?

Hi,
i have assigned it at user level then why iam i
getting the currency code of site level ?Did you user to logout and login again after setting the profile option at the user level?
What if you set this profile option at the site/application/responsibility level, can you reproduce the issue then?
Thanks,
Hussein

Help - User exit to change item level data in Purchase Order

Hi,
Can anyone let me know the user exit to change item level data in purchase order . there is a badi ME_PROCESS_PO_CUST for this but the issue is its method process_item gets triggered only when the item is changed. My requirement is For purchase order document types u201CZSOu201D and u201CZCOu201D, where the purchase order is a u201CLimits Orderu201D only i.e. no materials or services on the purchase order, the print price indicator field should be set to u201Cblanku201D (unchecked). now i cant use ME_PROCESS_PO_CUST because process_item wont get triggered if there is no change in item level data.
Thanks,
Rahul

Hi Rahul,
Probably EXIT_SAPLMEKO_002.
hope it helps,
Edgar

Restriction in MIGO at user level

Hi all,
I have a requirement , system should not allow to post excise invoice at the time of MIGO for some users .
we can restrict all the users by excise group but i want for specific users.
How can i achieve this.

hi
there are two settings first is for displaying options in the MIGo EXCISE tab
it is to be donr in Define Processing Modes Per Transaction
once tick for cap and post it will be vivable to all users
now whn you dont give authorisation fot posting then POSTING will not be done although cap and post is viewable
regards
kunal

Inconsistency Data between Role Level & User Level Risk Analysis

Hi,
When we run Role Level Risk Analysis for a role (Ex: XYZ), there is no SOD conflicts. But when we try to run the user level analysis, this role shows SOD conflicts. I mean, XYZ is assigned with other roles. Combination of other roles access may bring SOD conflict, thats fine, but here the challenge is role XYZ itself has SOD conflicts. The same does not appear when we run Role Level Risk Analysis!!
How could this happen??
Thanks,
Karthik

Hi Karthik,
The role might be mitigated at role level.
In RAR Anayze tool, click -More options to expand the selection options
Chose "Exclude Mitigated Risks: No"

Information Regarding Essbase Security Except Filter Level and User Level

I have an requirement to implement data level security in Essbase. For ex: A user can only see those data which are from Asia region or an user will be able to see those data which are from America.
Asia and America are defined in my location dimension.
can any one explain about it without using user Level Security and Filter level security.
Please tell me how to do it?
Thanks in advance.

Sandeep's reference the DBAG and the section on filters is the right direction. The filter is created in EAS.
Let's use an example.
You create a METAREAD filter (that is, it filters both data and dimensionality) that gives a user limited access to the Location dimension (I think I have that right), e.g., the British Isles, the UK and Ireland. You can also create a READ filter but it only limits data and, in my opinion at least, causes confusion because users can see metadata (the whole world) but only see data for the British Isles.
NB -- filters can be assigned to individual usernames or to groups that users are members of. For a POC, I'd keep it simple and just assign it to a username, but it's your choice.
Assign the filter to the user in Shared Services.
Try connecting to the database in Excel through the Classic Add-In or SmartView to test what the user sees -- it should be: Total Location, British Isles, the UK, and Ireland. You will see Total Location (top of the dimension) because that's how Essbase navigates down -- it has to have the dimension name to find the limited children. You won't see any data there. But you will see data at the Location members that the METAREAD filter allows.
That's it -- it's been around since the year dot, and is the way access is restricted. You shouldn't need to reinvent the wheel to get this to work in OBIEE. Essbase should do the work.
Regards,
Cameron Lackpour

Organization level authorization restrictions

Hello All,
Please can you let me know
1) f it is possible to org level authorization restrictions for CLM documents and master data without any development?
- E.g. while creating suppliers the user should only be able to create for the Company assigned to the user id?
2) What is the significance of the company and organization unit fields in the user account information page?
Regards,
Subramaniam Iyer

Hi ,
Could you share about your solution ? I think I have face the same problem as yours.

W7: User Profile Service service failed at log on: Apparently W7 is no longer creating any user profile data other than username and picture.

First time poster, but I think I've done my homework on this issue.
This issue has similar symptoms to a problem with vista: http://www.vistax64.com/tutorials/130095-user-profile-service-failed-logon-user-profile-cannot-loaded.html
However, it is definitely not the same issue (see further).
Current Config:
HP dv7-1450.
W7 RC 7100 x64
Last update (up to date as of 8/31/09) installed succesfully 8/26/09 and should be unrelated to this issue (not verified yet by a pre-update restore).
Running with Admin account while diagnosing/troubleshooting.
Currently have two working accounts, one standard, one admin.
Symptom:
New user accounts cannot be logged into. On an attempted login to the new account, the following information is displayed on the login screen: "The User Profile Service service failed the logon. User profile cannot be loaded." Windows then logs off the operator and returns to the initial user selection screen. All other aspects of use are normal.
Current Diagnostics:
First attempts to resolve this problem were to recreate the new account. This was attempted when logged in as both Standard and Admin. This was also attempted under safe mode. This has been attempted with virus protection disabled. All to no difference in the symptom.
The similarity to the Vista issue (linked above) caused me to check the registry entry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ for the new profile (as suggested by that link). Unlike that issue, there simply is no entry for the new user. Examination of the new log entries from creation of account to attempted log in provides the following entries:
Level Date and Time Source Event ID Task Category
Information 8/31/2009 12:34:31 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.
Warning 8/31/2009 12:34:11 PM Microsoft-Windows-Winlogon 6001 None The winlogon notification subscriber <Profiles> failed a notification event.
Information 8/31/2009 12:34:11 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.
Warning 8/31/2009 12:34:11 PM Microsoft-Windows-Winlogon 6001 None The winlogon notification subscriber <Sens> failed a notification event.
Error 8/31/2009 12:34:10 PM Microsoft-Windows-User Profiles Service 1500 None "Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, and that your network is functioning correctly.
DETAIL - Only part of a ReadProcessMemory or WriteProcessMemory request was completed.
Warning 8/31/2009 12:34:10 PM Microsoft-Windows-User Profiles General 1509 None "Windows cannot copy file C:\Users\Default\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData720896_00.sqm to location C:\Users\TEMP\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData720896_00.sqm. This error may be caused by network problems or insufficient security rights.
DETAIL - Access is denied.
Error 8/31/2009 12:34:09 PM Microsoft-Windows-User Profiles Service 1511 None Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.
Warning 8/31/2009 12:34:09 PM Microsoft-Windows-User Profiles General 1509 None "Windows cannot copy file C:\Users\Default\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData720896_00.sqm to location C:\Users\{New Username}\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData720896_00.sqm. This error may be caused by network problems or insufficient security rights.
DETAIL - Access is denied.
Naturally I started with the earliest error first, and decided to look to see what is going on. The file that is trying to be copied is there, but the destination folder does not exist. As near as I can tell, whatever process (the User Profiles General Service?) is trying to perform the copy does not have sufficient access to perform the operation. Specifically I suspect it may not be able to create the appropriate folders before performing the copy. Interestingly, it appears that when windows attempts to open/create a temporary account profile, the same issue occurs. Since there is no registry entry either, I suspect that the issue also extends to the creation of registry keys, but I am not familiar enough with the sequence of events in the creation of a user profile to determine if this would come before or after a user profile's first login.
I attempted to find more information, and was able to investigate the UPS diagnostic event log (for a different, but identical attempt at creating and using the new profile). The following two (unhelpful to me) log entries were generated.
Level Date and Time Source Event ID Task Category
Information 8/31/2009 12:34:10 PM Microsoft-Windows-User Profiles Service 1002 (1001) "The description for Event ID 1002 from source Microsoft-Windows-User Profiles Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
The message id for the desired message could not be found
Information 8/31/2009 12:34:09 PM Microsoft-Windows-User Profiles Service 1001 (1001) "The description for Event ID 1001 from source Microsoft-Windows-User Profiles Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
It seems to imply that the User Profiles Service may be corrupted, but this may also be unrelated. I do not know how to specifically repair this service anyway (but am open to try it if someone can walk me through it a bit).
There's the info. I'd like to figure out how to watch the account creation process in more detail to see if I gleen more, but I don't have the experience to know what to do to enable such a log. I will not perform a reinstall and am loath to do a restore, instead looking more for a cause and effect repair: something that would actually help MS fix the problem rather than have the customer fix the symptom.
Thanks in advance to responders!

First time poster, but I think I've done my homework on this issue.
This issue has similar symptoms to a problem with vista: http://www.vistax64.com/tutorials/130095-user-profile-service-failed-logon-user-profile-cannot-loaded.html
However, it is definitely not the same issue (see further).
Current Config:
HP dv7-1450.
W7 RC 7100 x64
Last update (up to date as of 8/31/09) installed succesfully 8/26/09 and should be unrelated to this issue (not verified yet by a pre-update restore).
Running with Admin account while diagnosing/troubleshooting.
Currently have two working accounts, one standard, one admin.
Symptom:
New user accounts cannot be logged into. On an attempted login to the new account, the following information is displayed on the login screen: "The User Profile Service service failed the logon. User profile cannot be loaded." Windows then logs off the operator and returns to the initial user selection screen. All other aspects of use are normal.
Current Diagnostics:
First attempts to resolve this problem were to recreate the new account. This was attempted when logged in as both Standard and Admin. This was also attempted under safe mode. This has been attempted with virus protection disabled. All to no difference in the symptom.
The similarity to the Vista issue (linked above) caused me to check the registry entry under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ for the new profile (as suggested by that link). Unlike that issue, there simply is no entry for the new user. Examination of the new log entries from creation of account to attempted log in provides the following entries:
Level Date and Time Source Event ID Task Category
Information 8/31/2009 12:34:31 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.
Warning 8/31/2009 12:34:11 PM Microsoft-Windows-Winlogon 6001 None The winlogon notification subscriber <Profiles> failed a notification event.
Information 8/31/2009 12:34:11 PM Microsoft-Windows-Winlogon 6000 None The winlogon notification subscriber <SessionEnv> was unavailable to handle a notification event.
Warning 8/31/2009 12:34:11 PM Microsoft-Windows-Winlogon 6001 None The winlogon notification subscriber <Sens> failed a notification event.
Error 8/31/2009 12:34:10 PM Microsoft-Windows-User Profiles Service 1500 None "Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, and that your network is functioning correctly.
DETAIL - Only part of a ReadProcessMemory or WriteProcessMemory request was completed.
Warning 8/31/2009 12:34:10 PM Microsoft-Windows-User Profiles General 1509 None "Windows cannot copy file C:\Users\Default\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData720896_00.sqm to location C:\Users\TEMP\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData720896_00.sqm. This error may be caused by network problems or insufficient security rights.
DETAIL - Access is denied.
Error 8/31/2009 12:34:09 PM Microsoft-Windows-User Profiles Service 1511 None Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off.
Warning 8/31/2009 12:34:09 PM Microsoft-Windows-User Profiles General 1509 None "Windows cannot copy file C:\Users\Default\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData720896_00.sqm to location C:\Users\{New Username}\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData720896_00.sqm. This error may be caused by network problems or insufficient security rights.
DETAIL - Access is denied.
Naturally I started with the earliest error first, and decided to look to see what is going on. The file that is trying to be copied is there, but the destination folder does not exist. As near as I can tell, whatever process (the User Profiles General Service?) is trying to perform the copy does not have sufficient access to perform the operation. Specifically I suspect it may not be able to create the appropriate folders before performing the copy. Interestingly, it appears that when windows attempts to open/create a temporary account profile, the same issue occurs. Since there is no registry entry either, I suspect that the issue also extends to the creation of registry keys, but I am not familiar enough with the sequence of events in the creation of a user profile to determine if this would come before or after a user profile's first login.
I attempted to find more information, and was able to investigate the UPS diagnostic event log (for a different, but identical attempt at creating and using the new profile). The following two (unhelpful to me) log entries were generated.
Level Date and Time Source Event ID Task Category
Information 8/31/2009 12:34:10 PM Microsoft-Windows-User Profiles Service 1002 (1001) "The description for Event ID 1002 from source Microsoft-Windows-User Profiles Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
The message id for the desired message could not be found
Information 8/31/2009 12:34:09 PM Microsoft-Windows-User Profiles Service 1001 (1001) "The description for Event ID 1001 from source Microsoft-Windows-User Profiles Service cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
It seems to imply that the User Profiles Service may be corrupted, but this may also be unrelated. I do not know how to specifically repair this service anyway (but am open to try it if someone can walk me through it a bit).
There's the info. I'd like to figure out how to watch the account creation process in more detail to see if I gleen more, but I don't have the experience to know what to do to enable such a log. I will not perform a reinstall and am loath to do a restore, instead looking more for a cause and effect repair: something that would actually help MS fix the problem rather than have the customer fix the symptom.
Thanks in advance to responders!
To resolve this issue, I suggst you delete the file C:\Users\Default\AppData\Local\Microsoft\Windows Live\SqmApi\SqmData720896_00.sqm.Arthur Xie - MSFT

Dont allow to change item level data in sales order.

Hi all,
I have a requirement in which, users should not be allowed to change item level data or not allowed to add any new items in sales order on a certain condition. But they should be allowed to change the header level data.
How can i achieve this.
Can anyone help me?

Hi,
Check below exit.
MV45AFZZ and in form USEREXIT_MOVE_FIELD_TO_VBAP.
Here check for ur validation, If passes then CHECK variable SVBAP-TABIX. If it is 0 then item is created. If it is GT 0 then item is changed. Other way could be...
select data from VBAP for each sales document and item in xvbpa internal table.
If for any item u don't have data in VBAP table that means u r adding that item. So issue error message.
*       FORM USEREXIT_MOVE_FIELD_TO_VBAP                              *
*       This userexit can be used to move some fields into the sales *
*       dokument item workaerea VBAP                                  *
*       SVBAP-TABIX = 0: Create item                                 *
*       SVBAP-TABIX > 0: Change item                                 *
*       This form is called at the end of form VBAP_FUELLEN.          *
Thanks,
Vinod.

User Level Data Restriction in OBIEE

Similar Messages

Maybe you are looking for