User migration vom SAP DB to LDAP: Problem when userId not equal to logonId
Hello
I have to write a migration tool which migrates the users stored in the SAP DB to LDAP. Thereby the logon ID of the users in the SAP DB is not equal to the user ID.
The migration works fine and in SAP Identity Management (IDM) everything is ok.
But when I try to log onto the portal with a migrated user, the portal tells me that no portal role is assigned to the user. But the IDM shows clearly that the portal role is assigned to the user.
Investigation showed that when I create in the LDAP a user with the same logon ID and user ID, the log onto the portal works ok. As soon the logon ID differs from the user ID, the portal does not find the assigned portal role anymore, although in IDM everything works.
How can I solve this problem? It is important that the logon ID and the user ID are different as otherwise all the stored data has wrong references.
Greetings
Rolf
Edited by: Rolf Grüninger on Jul 19, 2011 6:08 PM
Problem solved:
The naming attribute of the user account has to be set to the same attribute as the one of the user object and not to the user logon ID.
Similar Messages
-
AutoFS + Samba share problems when share not online (especially in itunes)
I'm trying to look into having some or all of my media on a server for a couple of my macs, the main one of interest right now being a mac mini working as a HTPC under a tv, being operated 99% of the time with just the apple remote and frontrow.
A friend informed me that if you have your itunes library not managed and add files from a remote share then everything works pretty well. Namely if you try to play a file it will seemingly automount the remote file and start it playing. If the remote server is not available it will quickly discover this and after a short pause start giving explanation marks next to the broken tracks. Get the remote destination connected and then try to play a broken track and it will successfully mount the track and play.
Basically perfect.
I quickly tried accessing these files via a symbolic link or alias to them on the remote drive, in doing this i can be somewhat insulated from problems of trying to move the library to other machines/shares in the future. This all works fine but you do lose the ability for itunes to automatically mount the remote drive, which is a bit of a step back, but not a big deal on my normal machine. On my HTPC machine however i'd really like front row to be able to just work, hence automatically mounting the server as required.
The only problem was that when i tried with files directly added to the itunes library from a remote location frontrow would NOT automount the tracks/videos when you attempted to play them like itunes would do.
I've just spent the last few hours following the advice here
http://rajeev.name/blog/2007/11/22/autofs-goodness-in-apples-leopard-105-part-i/
to setup autofs in the hope that this would let me get auto mounting working as it does with itunes and directly added to the library remote files.
I boiled this down to the following settings
as root
vi /etc/auto_master
and add
/smb auto_smb
then create this new config file
vi /etc/auto_smb
and add
<Mount dir under /smb folder> -fstype=smbfs ://<share user>:<share pass>@<ip address>/<share point>
ie.
testMount -fstype=smbfs ://netuser:[email protected]/remoteMount
finally tell automount to throw away its cache
automount -vc
then the mount should be setup
df -h
shows the indirect map waiting
map auto_smb 0Bi 0Bi 0Bi 100% /smb
and by triggering it
ls /smb/testMount
you should connect and get a listing, a subsequent df shows
df -h
//[email protected]/Media 466Gi 325Gi 141Gi 70% /smb/Media
Everything worked well with the share getting mounted nicely when present, frontrow could just start playing the files it needed, perfect!!
The problem came when i wanted to simulate the media server being offline, basically frontrow, a lot of the system including finder, cd commands attempting to access the share, and itunes if you tried that would all freeze for long periods of time as they tried their best to get the files they were looking for.
I tried looking into getting this to gracefully time out and think i got somewhere by trying to setup the samba share to be soft linked.. I wasn't sure in what files i could add this to, first attempts didn't seem to do anything but adding this seemed to make a difference
/etc/nsmb.conf
containing something like
#Configuration file for example.com
[default]
minauth=ntlmv2
streams=yes
soft=yes
to turn soft samba shares on. Things like cd in a terminal seemed to behave quite well with this, when no remote share present you would get empty folders and the like. Finder would also seem to be reasonable with it.
Frustratingly itunes and frontrow both still have quite massive pauses even when finder and cds in the background show that perhaps the soft links are working and failing like they should.
I'm now left wondering what i can do to fix it, and resorting to perhaps having the files added via a symbolic link, using the login items to launch the remote share every boot and then having it so that all i need to do is reboot the HTPC mac mini if the server is on for it to pick it up and let me play the files. Otherwise they'll just be unavailable and will fail gracefully without locking up itunes. The perfect solution would be to either have a crontab running, or some applescript bound somehow to whenever frontrow is ran which manually tries to tell finder to do the equivelant mount the login items setup does.
It's frustrating though as its so close, and the autofs solution if it did work better would seem to be the perfect solution. Has anyone dabbled with this and got any suggestions as to options you can setup to make things not go horribly wrong when a remote share is NOT present, preferrably within the context of itunes or front row not complaining, but to be honest any suggestions i'll be able to try out myself.
Sorry i've written so much, perhaps some of it will be helpful reference as it took me a while to decipher that link at the top into just setting up a samba autofs.
Cheers.It seems like it's not only the ArchLinux workstation that displays the norwegian letters wrong. The only machine that shows this correc is the machine that created the file/catalogue.
It seems like the windows 2000 displays the cataloge created by windows XP just fine. -
I recenty ran into a problem when measuring 6 equal voltage signals. When using a g
ood quality digital meter all voltage signals where equal and also using the labview test panel all voltage signals where equal. When measured by my vi i found that the voltage signals where not the same 2 of the channels displayed almost twice the amount.After changing the channel order using the I/O tabs on the right of the control panel I found i got the correct voltage readings. What caused my vi to diplay incorrect voltage readings due to the order of my I/O channels?I am using Labview 6.0 with a SCB-68 shielded I/O Connector Block interfaced with a NI-DAQ Multifunction I/O board PCI-MIO-16E-4.
Attachments:
6_Channel_Data_Logger-Rev0.vi 1 KBood quality digital meter all voltage signals where equal and also using the labview test panel all voltage signals where equal. When measured by my vi i found that the voltage signals where not the same 2 of the channels displayed almost twice the amount.Hello;
I couldn't open the attachment you posted. However, you probably set the wrong input limits for your gains or had a too small interchannel delay in between channels that wasn't letting the instrumentaion amplifier to settle down properly.
A good way to make sure your VI is the cause for the problem is to run one of the Labview shipping examples to do the acquisition. The best one to try is the one named Continuous Acquisition and Chart(buffered).vi.
Regards
Filipe A.
Applications Engineer
National Instruments -
Run Into Problem When Trying Not To Hard Code the Host Name
My code (using the JavaMail API) works fine when the SMTP host name is hard coded in the program:
props.put( "mail.smtp.host", "TheHostName" );Then, I tried to put the host name in a properties file (smtpServer.properties). The properties file is in the $TOMCATHOME\webapps\AppName\WEB-INF\classes\resources directory. And the properties file has this one single line:
smtpServer = TheHostName //Note: The host name has only alpha characters, dots, and dashesIn my program, I did:
private final String PROPFILE = "resources/smtpServer.properties";
private Properties oProp = null;
public SendBatchMails() // this is the constructor in my class
try
oProp = new Properties();
oProp.load ( getClass().getClassLoader().getResourceAsStream( PROPFILE ) );
catch( IOException oEx )
System.out.println("Unable to load the Properties " + PROPFILE + oEx );
String smtpServer = oProp.getProperty( "smtpServer" );
Properties props = System.getProperties();
props.put( "mail.smtp.host", smtpServer );And, I got this runtime error:
java.lang.IllegalArgumentException: argument type mismatch
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
java.lang.reflect.Method.invoke(Method.java:324)
org.apache.commons.beanutils.PropertyUtils.setSimpleProperty(PropertyUtils.java:1789)
org.apache.commons.beanutils.PropertyUtils.setNestedProperty(PropertyUtils.java:1684)
org.apache.commons.beanutils.PropertyUtils.setProperty(PropertyUtils.java:1713)
org.apache.commons.beanutils.BeanUtils.setProperty(BeanUtils.java:1019)
org.apache.commons.beanutils.BeanUtils.populate(BeanUtils.java:808)
org.apache.struts.util.RequestUtils.populate(RequestUtils.java:1252)
org.apache.struts.action.RequestProcessor.processPopulate(RequestProcessor.java:821)
org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:254)
org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:525)
javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
javax.servlet.http.HttpServlet.service(HttpServlet.java:802)I would agree with Reply 1. From the stack trace it is apparent that it comes from Struts, where it is failing to set some kind of property in a bean. However the code that you posted doesn't seem to have anything to do with that. Check your Struts configuration.
-
Ok I am really a new user of Mac so here is my problem when I bring up Safari and I go over to the Help word on the top of the screen to find a question when I pick a question and the window comes up there is a blank window nothing is there the help boxes work on my other Apps so whats wrong. Help
Could you please give us a picture of what is going on. This is a picture of what the top of Safari looks like when I go to the Help menu. I typed in the word cache and a number of options appeared below. Is this not happening for you?
-
Problem when trying to publish Query through BeX in Portal as iView
Hi ,
We are trying to publish BW 3.5 query in EP 6.0.
when we are trying to publish the query as iView in portal, it gives the error message 'System Error'. The J2EE Error Log contains the following error :
#1.5#001321FC0EDF001D0000000100000AF800042349427FEAFD#1164697462095#com.sap.security.core.server.jaas##com.sap.security.core.server.jaas#J2EE_GUEST#2##BID#AMARNATH_RR #6AA3FE0EADF14B2593F0019B1DB52607#SAPEngine_Application_Thread[impl:3]_17##0#0#Error##Java###Authentication stack: [].
[EXCEPTION]
#2#evaluate_assertion_ticket#javax.security.auth.callback.UnsupportedCallbackException: Unsupported callback!
at com.sap.engine.services.rfcengine.security.impl.RFCCallbackHandlerImpl.handle(RFCCallbackHandlerImpl.java:49)
at javax.security.auth.login.LoginContext$5.run(LoginContext.java:812)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.login.LoginContext$SecureCallbackHandler.handle(LoginContext.java:808)
at com.sap.security.core.server.jaas.EvaluateAssertionTicketLoginModule.removeSSOHeader(EvaluateAssertionTicketLoginModule.java:736)
at com.sap.security.core.server.jaas.EvaluateAssertionTicketLoginModule.login(EvaluateAssertionTicketLoginModule.java:390)
at com.sap.engine.services.security.login.ModulesProcessAction.run(ModulesProcessAction.java:69)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.services.security.login.FastLoginContext.login(FastLoginContext.java:154)
at com.sap.engine.system.SystemLoginModule.login(SystemLoginModule.java:90)
at sun.reflect.GeneratedMethodAccessor206.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:675)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:129)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:610)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.login.LoginContext.invokeModule(LoginContext.java:607)
at javax.security.auth.login.LoginContext.login(LoginContext.java:534)
at com.sap.engine.services.rfcengine.RFCDefaultRequestHandler.handleRequest(RFCDefaultRequestHandler.java:60)
at com.sap.engine.services.rfcengine.RFCJCOServer.handleRequestInternal(RFCJCOServer.java:113)
at com.sap.engine.services.rfcengine.RFCJCOServer$ApplicationRunnable.run(RFCJCOServer.java:171)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)
#1.5#001321FC0EDF00140000000600000AF800042349427FF32E#1164697462095#com.sap.engine.services.rfcengine##com.sap.engine.services.rfcengine.RFCJCOServer.handleRequestInternal()####BID#AMARNATH_RR #6AA3FE0EADF14B2593F0019B1DB52607#Thread[JCO.ServerThread-8,10,SAPEngine_System_Thread[impl:5]_Group]##0#0#Error##Plain###java.lang.RuntimeException: com.sap.engine.services.rfcengine.RFCException: Incoming call is not authorized#
#1.5#001321FC0EDF00140000000700000AF800042349427FF40A#1164697462111#com.sap.engine.services.rfcengine##com.sap.engine.services.rfcengine.RFCJCOServer.handleRequestInternal()####BID#AMARNATH_RR #6AA3FE0EADF14B2593F0019B1DB52607#Thread[JCO.ServerThread-8,10,SAPEngine_System_Thread[impl:5]_Group]##0#0#Error##Plain###java.lang.RuntimeException: com.sap.engine.services.rfcengine.RFCException: Incoming call is not authorized
at com.sap.engine.services.rfcengine.RFCJCOServer$ApplicationRunnable.run(RFCJCOServer.java:188)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)
Landscape:We have both BW 3.5 and EP 6.0, SP 16 on the same instance in
same physical machine. EP 6.0 works on J2EE engine as an add-in installtion.
Steps we followed for the integration of EP with BW:
1)Create RFC Destination in J2EE Engine:
Parameters:
Program ID: xyz
Gateway host: abc.ad.company.com
Gateway service: sapgw00
Application server host:abc.ad.company.com
System number: 00
Client: BID
Language: EN
User: sapjsf
Password: ********
2)Maintain RFC Destination for SAP EP 6.0
Parameters:
RFC destination: SAP_EP
Connection type: T for TCP/IP connection
Description: SAP EP RFC Destination
Technical Settings:
- Type of activation: Registered server program
- Program ID: xyz
- Gateway host: abc.ad.company.com
- Gateway service: sapgw00
Logon/Security:
- Send SAP Logon Ticket: Activated
Special Options:
Unicode
3)Maintain Portal Server Settings for SAP EP 6.0 in table RSPOR_T_PORTAL
in BW 3.5
RFC destination: SAP_EP
System name: BIDEV
Default: Checked
Portal URL prefix: http://abc.ad.company.com:50000
RM prefix for BW metadata: <empty>
KM service URL: <empty>
P.S.:We have maintained one more dummy entry as per the SAP Note 815044
in the table RSPOR_T_PORTAL.
4)Maintain Single Sign-On in SAP BW
In transaction RZ10, We have maintained following settings:
login/create_sso2_ticket=2
login/accept_sso2_ticket=1
5)Export BW Certificate to SAP BW and
6)Import BW Certificate to SAP EP 6.0
We have followed the above mentioned two steps.
7)Create BW System in SAP EP 6.0
Parameters:
Log on methods: SAPLOGONTICKET
We have created the BW system and the Connection test in WAS Connection
is working fine.
8)Configure User Management in SAP EP 6.0
This step is not maintained as our scenario does not demand it.
9)Export Portal Certificate to SAP EP 6.0 and
10)Import Portal Certificate to SAP BW
This step is also maintained as per Performance Assistant guidelines in
SPRO.
The user that we are trying to log into BeX Web Query Analyzer is
Amarnath_rr who has 'SAP ALL' rights and the same user in EP is assigned'Super Admin' as well as 'Content Admin' role.
Can anyone throw any light on wat the error might be??Ricky,
a couple of clarifications :
1. Does the report execute independently on the web - when you execute in Query view over IE or through a web template
2. Check if SSO is properly configured - you can check if SSO is enabled by using TCode STRUST in BW. - the status of PSE should be Green.
Arun
Assign points if useful -
Problem with users in portal - login conflict with LDAP.
Hi.
Let me describe our problem:
We've a EP5 portal with LDAP conected to a central LDAP server, users access with the same user and password to all the different systems.
The problem happens to users who have theyr passwords expired. We already set to 0 the password expiration days to avoid future problems but that didn't applied to the already expired ones.
This affected users cannot change the password due to problems with the connection rights to LDAP server.
We're trying to find the place there it's set that the user is in some kind of "password expired" status, directly in a database table if neccesary, to change the status manually, as system does not allow os to set it by user administration in portal.
Any suggestions would be appreciated.Restoring expired Portal passwords
Solved -
Initial password when LDAP user created i SAP?
Hi,
I'm about to configure LDAP integration with SAP, where users that exist only on the LDAP server are created in SAP.
Are any initial passwords automatically set for these users in SAP, or will an administrator have to go in and set an initial password for all created users?
Thanks, OscarHi,
I assume you will use the LDAP synchronization in an ABAP system. Here you have to maintain the fields to be synchronized. The password field is typically not synchronized but you can fill in the logondata hashvalue. I never tried to get the hashvalue out of LDAP because LDAP and SAP may use different hash algorithms. The better way is to set a fixed value in the mapping. You can use SAP functions to maintain the hashvalue.
Transaction for maintaining the mapping: LDAPMAP.
Regards
Rainer -
Asian Language problem (###) after OS/DB Migration of SAP BW 3.5
Hello,
We have recently migrated our SAP BW 3.5 system form Windows to Linux OS and now we have some issue in the BEX. when we log in with Language EN in to bex and then run any report related to Japan/China (Asian) then the reports is showing #### in place of Asian characters.
It is fine if we log in to Web reporting we have no issues.
Please provide me the solution asap I will give you full points
System: SAP BW 3.5
OS/DB Migration : from windows 32 bit to Linux 64 bit
Problem: In Bex asian character are shown as '###' when log in with Language "EN"Hello Murali,
Thanks for your information....I got much idea and i will allot full points for you.
But the solution which i for is as below
Option 1 for GUI 710)
step1 -> as you said changed the language in system Regional setting to Japanese
step2 -> upgrade GUI to 710
step3 -> Go to GUI Options and check ON the "With Wizards"
step4 -> go to the GUI-> select the BW system on it -> click on change button
step5 -> go to 'code page tab' and then uncheck "Unicode off" and select the language from default to Japanese
Option 2 for GUI 640 or above)
step1 -> as you said changed the language in system Regional setting to Japanese
step2 ->Go to GUI (640) select the BW system on it -> click on change button or properties
step3 -> click Advance button -> Uncheck 'Default code page' and select the language to 'JA' and then OK -
Hi all!
I'm trying to configure my UME to a MS Active Dir Server...
I managed to display the users and groups - stored in the LDAP - in the useradmin GUI of the UME http://<server>:50000/useradmin.
The problem I have is the following:
the groups in the LDAP Directory Server have users as members. But in the GUI - when choosing a group and click maintain users - are not displayed.
In order to get the groups dislayed in the GUI I had to edit the configuration XML file. I guess there is a way to edit the XML config file to be able to see users as kind of childs of a group.
Any hint on this issue?
Kind regards,
ChristophPost the LDAP path to your groups and users. Even though in LDAP the groups have members attached that doesn't mean you will see it that way in the UME gui. Are these the real user entries in LDAP or is this simply an attribute of the group?
Deep hierarchy implies groups are trees with the real user underneath and that no user will appear in multiple groups. Is that the way your LDAP is implemented?
See this help - http://help.sap.com/saphelp_nw04/helpdata/en/09/c5ee407552742ae10000000a155106/frameset.htm
Nick -
User home folders Upper and Lower case problem in FPN
Hi Sdn,
I am facing a wiered problem in FPN. I configured FPN between EP and BI portal.
EP is using UME as LDAP
BI portal is using UME as ABAP
configured KM folders on to EP using Webdav scenario
now when I try to save KM book marks, it is saving perfectly in EP
the problem is saving bookmarks in the userfolder with Uppercase like USER
the KM favorites iView with the path (/alias/userhome/<user.id>/favorites)is trying to look into the userfolder with lowercase like user and displaying nothing
plese help me in solving this for KM iView to ignorie case
Thanks!
Regards
SrinivasHi Simon,
I understand that this problem is because of UME as LDAP and ABAP .
I tried to create a KM Navigational iView for favorites folder /alias/userhome/<user.id>/favorites.
but here problem is I am not able to convert user.id to Ucase
As per your suggestion, it is not possible to create one KM navigational iView to peep into multiple folders
for this the solution might be in two ways. creating KM iView to ignore case and look into the user home folder
if so, How to make the iView to ignore case
second option is to configure BEx broadcaster to publish in USER.lower folder
is so, How to achieve this
being people started using FPN most frequently and moving BI to seperate Portal and use ABAP as ume.
users will start encounter this problem most often. SAP has to come out with solution for this
Srinivas -
Problem when migrate from WLI2.1 to WLI7
I met this problem when migrating my program from WLI2.1 to WLI7.
It report the following exception in WLI7:
<2002-10-21 下午05时05分15秒> <Error> <HTTP> <101019>
<[ServletContext(id=5904188,name=dkh
,context-path=/dkh)] Servlet failed with IOException
java.rmi.AccessException: Security Violation: User: 'admin' has insufficient permission
to
access EJB: type=<ejb>, application=WebLogic Integration, module=WLI-BPM Server,
ejb=WLPI
Principal, method=getRolesForUser, methodInterface=Remote, signature={java.lang.String,jav
a.lang.String,boolean}.
But it's fine in WLI2.1? Who can tell me why and how to solve it?
Thanks####<13 oct. 2004 17 h 05 CEST> <Info> <JMS> <ucwwe2> ><ucwls81> <WrapperSimpleAppMain> <<WLS Kernel>> <> <BEA->040114> <JMSServer "JMSServer", Finished scan of file >store "persistence" in directory "c:\bin\bea\jmsstore". >Found 2 025 records totalling 21 205 248 bytes.>
>####<13 oct. 2004 17 h 05 CEST> <Info> <JMS> <ucwwe2> ><ucwls81> <WrapperSimpleAppMain> <<WLS Kernel>> <> <BEA->?040056> <JMSServer "JMSServer". Deleting 2025 messages(s) with no matching destination.>
My JMS experience on WLS 8.1 ain't great, purley from these error messages it looks like the destination of these messages is the problem. Can you double check the destination exists and is configured correctly.
Hoos
www.orbism.com -
I am loging in SAP. Initial screen come where it display User Menu and Sap
Dear All,
When i am loging in SAP. Initial screen come where it display User Menu and Sap Menu, but User menu is in active not showing but T code are executing then what object i have missed.
can u help me?
Thanks,
Regards,
SachinHi Sachin,
It doesn't care if you're using SAP_ALL or any of those profile. That is not relevant. I had that case a few days ago, I'm not using any of those profiles and I made it work with help of one post.
If you put the transactions in the tab "Menu" of the role in the PFCG, and if you activate parameters I mentioned in a prior post, then you should see the Menu.
Tables SSM_CUST and USERS_SSM. The first is global and the other is user-especific.
The link in one of the first post of this thread hace all the info.
That should work, that worked in my case.
What values the parameters have on those tables? The more the info the better.
Updating the parameters on those tables should help. If still doesn't work then you should check another parameter using transaction RZ10 or report RSPARAM.
If my info solves your problem, points are appreciated, if not, we will try...
Jose -
You are not recognized as a user in the SAP customer notification system
Hello,
we are in OSS registered as CCC. I am able to send notifications from our SolMan to OSS with components(instalations) which are registered under out SAP customer number(our SolMan instalation etc.).
When I want to sned notification for our customers to OSS but with component of our customer(he has another SAP number, his instalation) then I got an error message
You are not recognized as a user in the SAP customer notification system:
You are not recognized as a user in the SAP customer notification system
Message no. DNO158
Diagnosis
No address data exists for this logon user in the SAP problem notification system.
The function you activated could not be executed.
Activated function Diagnosis
Send notification to SAP The notification was saved, but could
not be sent to SAP.
Update notification at SAP The notification was not updated to
reflect the SAP version.
Check for changes The system cannot compare the notification
with the current version at SAP.
Request list of the The notifications that you sent to SAP
notifications contained cannot be updated.
in the SAP problem notification system.
Procedure
Contact your system administrators.
Could you help me please?
view V_AISAPCUSTNOS ist filled with our customer numbers, I am in AISUSER...
Thanks Miloslav PudilHello Miloslav,
We have the same problem.
Somebody knows how can we resolve this?
Thanks,
Diego. -
How many ways we can create authorization for user groups in sap query reports
Hi Gurus, I am getting a problem when I am assigning users to user group in sap query report .The users other than created in user groups are also able to add &change the users .So please suggest me how to restrict users outside of the user group.
Please send me if u have any suggestions and useful threads.
Thank You,
Suneel Kumar.I don't think it can be done. According to the link below 'Users who have authorization for the authorization object S_QUERY with both the values Change and Maintain, can access all queries of all user groups without being explicitly entered in each user group.'
http://help.sap.com/saphelp_46c/helpdata/en/d2/cb3f89455611d189710000e8322d00/content.htm
Although I think you can add code to your infoset and maybe restrict according to authority group, i.e.:
Use AUTHORITY-CHECK to restrict access to the database based on user.
Press F1 on AUTHORITY-CHECK to find out how to use it in the code
Maybe you are looking for
-
How can a digital copy be used in a household with multiple apple ids, synced on the same computer? I want to put a digital copy on my device, and on my wife's device. Please help.
-
How to configure a pop up message when creating an appraisal?
Hi All, I have a question. When the supervisor creates an appraisal for an employee, the supervisor is obligated to create Objectives for the employee but creating Competencies are only optional for executives (people group). When the supervisor has
-
Vendor Payments using Credit Card
We are trying to use credit cards as a payment method in F110 for vendor payments. Does anyone have any documentation or please share your experiences on paying vendors using credit card? Process would be : Pay vendors using Corporate credit card and
-
MobileMe: failure to upload attachments to emails. Safari works why not Firefox?
L/Mouse on Slide Clip icon opens up Finder to select file to attach but the file does not upload. No "timer" icon appears on reload of email and no file is attached when email sent. Type and size of file makes no difference.
-
DPM is out of disk space for the replica
Trying to make a bare metal backup of a phyiscal server running 2008 R2 SP1 . I've checked im not out of space. I've uninstalled and reinstalled the agent, I've manually tried to make the disk allocation larger same error. DPM is out of disk space f