Skip to Content
avatar image
Former Member

How to restrict Global default layout setting by users ? Authorization

Hi Guru's,

Currently users are able to set their own report layout as the global default layout.

can we provide solution on how to prevent users from setting default layout for reports.

Users should be restricted to set user specific report layout only.

Authorization object S_ALV_LAYO will do the work for us,but the issue is we want this restriction only for some transactions and not all..

Dont know whether this can be done by ROLE-Transaction specific???

As far as I know if we unassign this Autho Object User will not be able to change Default layout for any of the reports /Transactions..

Does any one knows how an we achieve this???

Regards

Vikrant M Kelkar

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

5 Answers

  • Best Answer
    avatar image
    Former Member
    Dec 01, 2008 at 04:52 AM

    Hi,

    Authorization for S_ALV_LAYO should be restricted to endusers as it allows changes to Global settings. We in our company have a security policy against against assigning it to any of the job roles.

    Some applications like FICO have the object F_IT_ALV for the layout settings. I am not sure whether it exists for every module.

    However in certain transactions in applications like MM & SD the authorization to S_ALV_LAYO is built in the program for the transaction and we do not specifically authorize for the object in their roles.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      >

      > Hi,

      > Authorization for S_ALV_LAYO should be restricted to endusers as it allows changes to Global settings. We in our company have a security policy against against assigning it to any of the job roles.

      >

      > Some applications like FICO have the object F_IT_ALV for the layout settings. I am not sure whether it exists for every module.

      >

      > However in certain transactions in applications like MM & SD the authorization to S_ALV_LAYO is built in the program for the transaction and we do not specifically authorize for the object in their roles.

      Use F_IT_ALV for personal layout. You don't want everybody having access to the global layout S_ALV_LAYO. Your trace might show and will be looking for S_ALV_LAYO but F_IT_ALV is your solution.

      Search on S_ALV_LAYO. The search feature is your friend.

  • avatar image
    Former Member
    Dec 01, 2008 at 12:04 PM

    Hi Vikrant,

    Please check out the following SAP notes #409190 and #601803 which will be helpful to you.

    Thanks,

    Saby..

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      The object S_ALV_LAYO has only one actvity 23 defined for it. If you are going to activate it then there is no point in rremoving the tick. You can have only one of the two options deactivate the object completely or activate it with actvt 23.

  • avatar image
    Former Member
    Dec 01, 2008 at 03:11 AM

    S_ALV_LAYO authorisation object with field ACTVT, possible value is 23.(administrator)

    If user have this value than user can change the global/default lay out.

    If you remove this authorisation, user should able to save user specific lay out and can not change the global lay out.

    If you want to restrict this to only certain number of transaction than, you first need to remove the authorisation from respective roles and assign only to them where you want to allow.

    However, you need to make sure that, combination of roles (with and without S_ALV_LAYO) will still allow them to change it.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jan 07, 2009 at 09:24 PM

    Hi Vikrant

    You can restrict S_ALV_LAYO to certain transactions by using SU24 - here you can check/uncheck transactions assigned to auth object.

    However if you do this you need to check that there is no impact to existing functionality - the running of batch jobs etc.

    Regards

    Charmaine

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 17, 2009 at 01:47 AM

    Thanks evryone ..This is sorted now..

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Avinash Yadav Dokkara

      Hi,


      apart from S_ALV_LAYO, Use the object F_IT_ALV to restrict Global Layout modifications (Avoid giving Activity 70).


      Regards,

      Rama