Access Restriction of some confidential DMS documents.

[Former Member]

Hello Gurus,

I need your expert guidance on the following requirement.

The requirement is to restrict the access of the document to users like Author, Reviewer and Approver for the following business scenario:

Say there is a special document Type APR (Employee appraisal document)

And for 5 different employee created (Authors) the document giving their self-inputs.

Now these employee are assigned to say 3 different Supervisors (Reviewers) and one Manager (Approver)

{Author; Reviewer and Approver are maintained in Additional Data of the document.}

So each document will have a Reviewer and Approver assigned along with the Author.

Our requirement is to restrict the access of these 5 documents to the Employees (Authors), so that none of these employee can view each others document. And allow display/change to respective Supervisor (Reviewer) and Manager (Approver) only.

We need to restrict document access based on the above scenario

After checking, I think using authorization object the above requiremment can not be met. Can we use any user exit?

Thanks in advance!

Regards,

Ganesh

[Former Member]

Thanks all.

[Former Member]

Hello Ravindra and Abhijit,

Thanks for your prompt reply I'll test it and let you know by Monday, please guide me ...

(Can't we work with the exit, CV000001 and CV110001... if this is easy)

Regards,

Ganesh

[Former Member]

Hello guys,

For your information we've used badi: DOCUMENT_AUTH01 to map the scenario.

Regards,

Ganesh

[Former Member]

Hi,

Use document specific authorization for your scenario.

You have to activate ACL in SPRO (contorl data)then in DIR you will have one more tab called Authorization.

Here you can give DIR specific authorization to user like admin,edit,display.

These auth are document specific.

See whether this can fulfill ur req.

Regards

Abhijit

[Former Member]

Hi Ganesh,

This can be achived with help of two objects C_DRAW_DOKST and C_DRAW_BGR.

Take help from basis and make roles with having the status and authorizations groups maintained as per your requirement so that they can't access each other's documents. Make a authorization groups for type of documents and give them authorizations to specific status. This is totally maintained in roles and assign these roles to users.

I hope this will reslve the query.

Regards,

Ravindra