topic Re: How to restrict Global default layout setting by users ? Authorization in Application Development and Automation Discussions

How to restrict Global default layout setting by users ? Authorization

Former Member — Mon, 01 Dec 2008 01:20:24 GMT

Hi Guru's,

Currently users are able to set their own report layout as the global default layout.

can we provide solution on how to prevent users from setting default layout for reports.

Users should be restricted to set user specific report layout only.

Authorization object S_ALV_LAYO will do the work for us,but the issue is we want this restriction only for some transactions and not all..

Dont know whether this can be done by ROLE-Transaction specific???

As far as I know if we unassign this Autho Object User will not be able to change Default layout for any of the reports /Transactions..

Does any one knows how an we achieve this???

Regards

Vikrant M Kelkar

Re: How to restrict Global default layout setting by users ? Authorization

Former Member — Mon, 01 Dec 2008 03:11:48 GMT

S_ALV_LAYO authorisation object with field ACTVT, possible value is 23.(administrator)

If user have this value than user can change the global/default lay out.

If you remove this authorisation, user should able to save user specific lay out and can not change the global lay out.

If you want to restrict this to only certain number of transaction than, you first need to remove the authorisation from respective roles and assign only to them where you want to allow.

However, you need to make sure that, combination of roles (with and without S_ALV_LAYO) will still allow them to change it.

Re: How to restrict Global default layout setting by users ? Authorization

Former Member — Mon, 01 Dec 2008 04:52:17 GMT

Hi,

Authorization for S_ALV_LAYO should be restricted to endusers as it allows changes to Global settings. We in our company have a security policy against against assigning it to any of the job roles.

Some applications like FICO have the object F_IT_ALV for the layout settings. I am not sure whether it exists for every module.

However in certain transactions in applications like MM & SD the authorization to S_ALV_LAYO is built in the program for the transaction and we do not specifically authorize for the object in their roles.

Re: How to restrict Global default layout setting by users ? Authorization

Former Member — Mon, 01 Dec 2008 12:04:09 GMT

Hi Vikrant,

Please check out the following SAP notes #409190 and #601803 which will be helpful to you.

Thanks,

Saby..

Re: How to restrict Global default layout setting by users ? Authorization

Former Member — Tue, 06 Jan 2009 07:20:34 GMT

Hi All,

Thanks for your replies...

Issue we are having is when we try to activate this autho object S_ALV_LAYO then by default it takes Value "23" as ticked and doesnot allow us to Untick it(So that we can stop the Authorization)..

Any Clues...

Regards

Vikrant M Kelkar

Re: How to restrict Global default layout setting by users ? Authorization

Former Member — Tue, 06 Jan 2009 11:52:30 GMT

The object S_ALV_LAYO has only one actvity 23 defined for it. If you are going to activate it then there is no point in rremoving the tick. You can have only one of the two options deactivate the object completely or activate it with actvt 23.

Re: How to restrict Global default layout setting by users ? Authorization

Former Member — Tue, 06 Jan 2009 18:29:31 GMT


> Hi,
> Authorization for S_ALV_LAYO should be restricted to endusers as it allows changes to Global settings. We in our company have a security policy against against assigning it to any of the job roles.
> 
> Some applications like FICO have the object F_IT_ALV for the layout settings. I am not sure whether it exists for every module.
> 
> However in certain transactions in applications like MM & SD the authorization to S_ALV_LAYO is built in the program for the transaction and we do not specifically authorize for the object in their roles.

Use F_IT_ALV for personal layout. You don't want everybody having access to the global layout S_ALV_LAYO. Your trace might show and will be looking for S_ALV_LAYO but F_IT_ALV is your solution.

Search on S_ALV_LAYO. The search feature is your friend.

Re: How to restrict Global default layout setting by users ? Authorization

charmaine_greene — Wed, 07 Jan 2009 21:24:09 GMT

Hi Vikrant

You can restrict S_ALV_LAYO to certain transactions by using SU24 - here you can check/uncheck transactions assigned to auth object.

However if you do this you need to check that there is no impact to existing functionality - the running of batch jobs etc.

Regards

Charmaine

Re: How to restrict Global default layout setting by users ? Authorization

Former Member — Fri, 17 Jul 2009 01:47:43 GMT

Thanks evryone ..This is sorted now..

Re: How to restrict Global default layout setting by users ? Authorization

Former Member — Fri, 18 Oct 2013 06:13:16 GMT

Hi Vikrant,

Could u let us know the solution sorted for this issue.

Thanks in Advance.

Re: How to restrict Global default layout setting by users ? Authorization

Former Member — Fri, 18 Oct 2013 10:16:22 GMT

Hi,

apart from S_ALV_LAYO, Use the object F_IT_ALV to restrict Global Layout modifications (Avoid giving Activity 70).

Regards,

Rama