07-10-2007 7:28 AM
Hi ,
I want to restrict authorization in the transaction to only display of work items.
Users should not be able to execute edit - > work item - > restart and etc..all this options under this menu should be disabled.user should have only display access .
How do I achieve it ?
I check that currently it is not checking authorization object for the activity .
Thanks
suman
07-10-2007 7:59 AM
Hi
You need to add the transaction code in a Role and then you need to set the Activity for the transaction code to just Display and remove the other Activity access frm there.
Use transaction code PFCG. You can achieve this by directly assignin the transaction code frm the menu in PFCG or using the authorization object.
Assign this role to the users so the access gets restricted.
Regards
Sumit
[reward with points if answer is useful.]
07-10-2007 8:37 AM
Hi chittaranjan,
When u generate profile the role will be displayed as a tree like structure,in that select the activity display and leave others....
Reg'
Zeemaaa..
07-10-2007 10:22 AM
Hi
You can do it T code PFCG.and give display authorization only click activity filed and check display.
Rewards point if helpful
Thanks
Pankaj Kumar
07-10-2007 11:12 AM
I already checked before posting the question that there is no object with activity as field .
07-10-2007 1:48 PM
Hi,
Goto SU24> enter the T.code in which u want the user should have only display . Execute it (Button on Appl> Toolbar), it gices 2 objects and on Appl. toolbar its a button as check indicator> click on this button.
It display a list of objects, select the objects with CHECK AND MAINTAIN priority.
Now goto the role of that user in which u assigned tat perticular Authorization , Double click on that role, it takes u in PFCG screen, click on Authorization Tab. Check that it shold be in change mode. Now check tat perticular object which v searched in SU24 with check and maintain, (cntrl+F), find tat object, after getting the object , in activity remoce all the selected fields, and just select 03 which is for display. Repeat the same for all objects and generate.
Now the user has only Display access.
Regards
Syed.