Skip to Content
author's profile photo Former Member
Former Member

Authorization BW IP

Hello Gurus,

We have the following scenario and would like to hear your comments:

1- User has access for company code 01 and also access to execute Planning Function , Planning Sequence related to this company code. (S_RS_AUTH - Object created for company code 01).

2 - User now needs access to run a Planning Sequence through portal for Company code 02 (But he can´t see any records for this company code 02, he can see only for company code 01). It is a process that will save records from company 02 into 01.

I try to create another object and assign to S_RS_AUTH, with just option 02 (Modify) and 0comp_code (02) and did not work, because he can also see the records for 02.

Points: User has access to run Planning Sequence and Planning Funcion with (*)

Let me know your comments.

Thanks

RDP

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

4 Answers

  • Best Answer
    Posted on May 05, 2011 at 06:45 PM

    Dear Ricardo,

    If user has the rights to modify he/she can also read the data. I don't know how can you solve it but, modify is the best option in this case.

    Best regards,

    Edward John

    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on May 09, 2011 at 10:39 PM

    Hello RDP,

    what you want is not possible. Actually, it does not make too much sense to me anyway.

    The user should be able to read company code 02 (using a function). Why must he NOT be able to see that data? What if he runs a simple copy from 02 to 01 and views the data in 01? He would be able to see what was in 02 anyway.

    What's the real security reason why the user is not allowed to see the 02 data (but still use it in functions)?

    Regards,

    Marc

    SAP Techology RIG

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on May 05, 2011 at 10:56 PM

    Thanks for you reply , but it did not work just with the modify option , because once you execute the Planning Sequence the records needs to be read and modified.

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on May 11, 2011 at 11:06 PM

    Hello Guys , thanks you all.

    We did a work around and it worked. We create a sequence that call an ABAP class and change in this class the user during the execution and this class also call the sequence that I want to execute with another company code. With that the user can only execute the sequence and can't see the records from other comp code.

    Edited by: ricardodupe on May 12, 2011 1:14 AM

    Edited by: ricardodupe on May 12, 2011 1:14 AM

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.