IDOC report restrict access

[former_member391940]

Hello everyone,

i would appreciate your help solving this issue.

As we noticed, currently we are using transaction WE05 to display Idoc's and so on. However, since we got some external partners using our system from another sales organization, we need to restrict the access to Idoc'.

So, we decided to create a report that could do that, following the next rules:

1. The Idocs displayed should only be idoc's related with the sales organization of the user that is running the report.
2. Users shouldn't be able to see any Idoc that it's not from or to the sales organization he represents.

Any idea on how to do that? Where can i get the sales organization of the IDOC to compare it with the user?

Thanks in advance!

[nabheetscn]

Hello Diogo

You will be doing this via authority check object. This authority check object can have sales organization as well as activity field. The idoc's in question must have sales org value in one of the segments which you will need to extract(too much for each idoc). If all your third-party have different partner details then you can put the logic based on the partner in question also.

Nabheet

[former_member391940]

Hello Nabheet,

thanks for your help.

That's what i was planning, the only difficult in that solution is how can i extract the partner details from the IDOC.

I tryied the use of FM READ_IDOC_COMPLETELY, but it only gives me two tables structured like EDIDS and EDIDC, none of this tables have that information.

That's what i didn't find yet, how to reach the partner information by code. Using WE05 transaction i can get that info, but i didn't find out where that is proccessed.

If you have any idea, i would appreciate your help.

Best regards!

[nabheetscn]

Under EDIDS internal table you will have different segments and check with your functional which segment will contain sales org.

Nabheet

[Jelena]

What IDoc specifically?

Unless Sales Org is in the IDoc control record EDIDC, such transaction would have very bad performance because we can't easily select the data from the segments.

Actually allowing "external partners" direct access into your SAP system is not a great idea either. What exactly are you trying to achieve with this? Isn't there a better solution that would  not involve someone logging into SAP and digging around in the IDocs? Can't you have the IDoc send a confirmation back to the partner or something like that?