Attribute-Permission Filter

[ashisachdeva1]

Hi,

I want to allow the user to edit the attribute in a particular master data only. how can i achieve this using the manage attribute permission app..

Please help.

Thank you

[Irmi_Kuntze · Accepted solution]

You need to give write permission to the master data type in a role first.

Then you can provide the specific field access of that master data type in the app "manage attribute permissions".

There you need to give read access too all fields they shall see and write to the one you want to allow to be changed.

In parallel, you need to remove the attribute permission SAP_ALL_ATTRIBUTES from the user, which is automatically assigned because of the standard global parameter ATTPERM_ASSIGN_NEW_USER from group PERMISSIONS.

If you decide to introduce such a concept on a broader scale, you should for the transition create an attribute permission that allows to read all attributes and assign that to all users or to a user group where your users are part in. Then create the attribute permission for the write access and assign it to those special users. Then delete all user assignment from SAP_ALL_ATTRIBUTES and finally remove the value X from global configuration parameter.

All new users would then need to get assigned the correct role, permission filter AND attribute permission

The creation of the write-attribute-permission is kind of self explanatory, check how SAP_ALL_ATTRIBUTES is done and read the online help, if that does not suffice

Irmi