Authorization to restrict shown values in query designer

[Loed]

Hi guys,

Just want to ask the needed authorization object so that users creating queries will only see the "authorized" values when restriction an infoobject?

For example:

I have an infoobject 0COMP_CODE with values:

1000

2000

3000

4000

5000

User A is authorized only to see the company codes for 1000 and 2000..

So when user A wanted to restrict the 0COMP_CODE in the query designer, he/she must only see the values 1000 and 2000 in the list..What authorization object do I need to implement this?

Thank you..

Loed

[Loed]

Hi guys,

Any help on this?

Thank you..

Loed

[Loed]

Hi guys,

Any idea about this?

Thank you..

Loed

[Loed]

Hi Ganesh and Hitesh,

Similar with Tom's suggestion above..

However, my problem is not about authorization when running the query but when CREATING THE QUERY..

I already tried ANALYSIS AUTHORIZATION (see link below)..I think it only applies when running the queries..But when creating a query, user can still see other values when restricting an infoobject which he/she is not authorized..

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/c0b7acf2-6121-2e10-5591-eaec182d9...

Regards,

Loed

[former_member183519]

Hi Loed,

Pls refer below link, it may helpful.

https://scn.sap.com/thread/3866655

Regards,

Hitesh

[former_member183012]

Hi Loed,

To achieve this requirement you need to create analysis authorization to restrict company code values and its should assign to particular user.

Bex query create restrict comp code with variable to by authorization type so that whenever user will execute report he or she will see only data of company code for which he is authorized.

Comp_code is already authorization relevant.

If you do  not know how to create analysis authorization please take help from security team or let us know.

Regards,

Ganesh Bothe

[Former Member]

the authorization object is S_RS_AUTH which in turn is 'filled' with objects maintained in RSECADMIN. These are called 'Analysis Authorizations'.

Google any of these terms to get a lot of info on how it works.

[Loed]

Hi,

I already tried that..I think it only applies when running the queries..But when creating query, user can still see other values which he/she is not authorized when restricting an infoobject..

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/c0b7acf2-6121-2e10-5591-eaec182d9...

Regards,

Loed

[Former Member]

Went too fast, i did not see that nuance in your question.

Never faced that issue/requirement, so no idea if it can be handled...

[Loed]

Ok, thank you for your time..

Regards,

Loed