iView Permissions

[Former Member]

Hi,

I am little ambiguous on how the permissions work at iview level and at different pcd levels.

If we have a iView which has got permission NONE to Everyone and we attach this iview to a role which has got READ to Everyone and attach this role to a user I am able to see the iview when I logged in as end user.

So here is the Role permission overrides the total pcd object permissions attached to the role or am I missing something.

Pls. clarify.

Thanks & Regards

Mrutyunjay

[Former Member · Accepted solution]

Hi Mrutyunjay,

there are different permission levels for administrators and end users. You set the administrative permissions for group Everyone to "None". That means user who are assigned to group Everyone but not to another group with more administrative rights are not able to see/edit/delete the iView.

However, to make the iView available to end users you have to check the end user flag. If you uncheck the end user flag, then end user will not see the iView even if it is assigned to a role.

Find out more about portal permissions in the <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/f6/2604f005fd11d7b84200047582c9f7/frameset.htm">SAP Library</a>.

Best regards,

Martin

[Former Member · Accepted solution]

Hi Martin,

Very much thankful for prompt response.

I understood from your reply that giving none permission and checking the end user flag will give him access to have that iview when it is attached to a role he has.

But I tried removing that flag (uncheking check box) and observerd -> the iView is surfacing.

Pls. suggest if I am wrong anywhere ...

Thanks & Regards

Mrutyunjay

[Former Member · Accepted solution]

Hi Mrutyunjay,

did you remove the end user flag for all user groups and portal roles which were attached to your portal user?

For example your user is assigned to group Everyone and group Administrators. You unchecked the end user flag for Everyone only. That means at runtime the portal checks your permissions and according to the checked end user flag for group administrator you will see the iView.

Be aware that you cannot remove the permissions for the super_admin_role. For test purposes use a user who is assigned to groups Everyone and Authenticated users only.

Best regards,

Martin

[Former Member · Accepted solution]

Hi Martin,

For the iView the permission is there only for super_admin_role and no other role is even attached to it.

For the user there is only one role to which the iview is attached... and groups everyone & Authenticated users only....

Still the iview is coming up....

regards

Mrutyunjay

[Former Member · Accepted solution]

If the iView is part of the role it will be visible to a user who has that role. The PCD permissions generally only affect page personlaization.

If you have a role that contains the iView, you can't stop the user launching that iView.

Cheers

[Former Member · Accepted solution]

Hi Michael,

Thanks for the response..

This is what I am trying to confirm.

"-><b>So here the Role permission overrides the total pcd object permissions attached to the role or am I missing something</b>.<-"

This means whatever the permissions the pcd object individually contain if it is attached to a role that will be accessable to the user...

Thanks & Regards

Mrutyunjay

[Former Member · Accepted solution]

Correct...

Cheers

[Former Member]

Hi Rao,

To clarify your ideas you could read these links:

<a href="http://help.sap.com/saphelp_nw04/helpdata/en/f6/2604f005fd11d7b84200047582c9f7/frameset.htm">Permissions into the Portal</a>

<a href="http://help.sap.com/saphelp_nw04/helpdata/en/f6/2604e905fd11d7b84200047582c9f7/frameset.htm">Permissions Inheritance Model</a>

PS: Award points for good answers.

Best regards,

Gianluca Barile