Grant access based on application type?

[Former Member]

Hi,

Is there a way to grant access to just some of the application types attached to a DIR? I would like to limit the users to open the CAD files but they should be able to open the PDF files attached. The idea is to create the PDF file automatically out of the CAD file so I canu2019t put them in different DIRs because that would involve manual work.

Kind regards,

Kristoffer Pehrson

[Former Member · Accepted solution]

Hi Kristoffer,

In your case, its possible either possible either by maintaining a separate Doc types(which you are against) or look at developing a new authorization object for the particular workstation application which can be added to roles and assigned to users.

Regards,

Pradeepkumar Haragoldavar

[Former Member · Accepted solution]

Thank's for the reply. It was as I expected I find it strange that there isn't a standard solution for this. Some times you don't want to spread the CAD files to everyone in the company. At the same time you might want to use the conversion funktion in the system so that people can access the PDF files.

[christoph_hopf · Accepted solution]

Hi Kristoffer,

from my point of view maybe the authorization trace could help to find a suitable authorization object for creating your checks. More information on this authorization trace could be found under http://wiki.sdn.sap.com/wiki/display/PLM/AuthorizationTraceintransactionST01

Useful information on each DMS authorization object can be found under http://wiki.sdn.sap.com/wiki/display/PLM/AuthorizationObjectsin+DMS.

If no standard authorization object could be useful maybe you can use a BADI like DOCUMENT_AUTH01 or DOCUMENT_MAIN01 to implement an individual check for the application type and so restrict some users to view special applications.

Best regards,

Christoph

[Former Member · Accepted solution]

The alternative is to use a display filter (standard functionality - no enhancement required). When you do this the users only see the PDF, not the CAD file so there is no reason to restrict it.

Edited by: Athol Hill on Nov 3, 2010 12:09 AM

[Former Member]

Hi Kristoffer,

You can't restrict users at application levels. Authorization are controlled by document types,document status,object links,t-codes,activities like create ,change,display and finally auhtorization groups. You may use authorization groups for such users.but can't restrict at application levels.

Hope this will resolve the query.

Regards,

Ravindra