topic Re: Restricting project system reports in Application Development and Automation Discussions

Restricting project system reports

Former Member — Tue, 15 Mar 2011 20:58:45 GMT

Hi all,

I`ve been able to use authorization objects to restrict projects based on person responsible in CJ20N (C_PRPS_VNR and C_PROJ_VNR). I expected these same authorization objects to restrict the same access (allow users to view projects only if they have access to 'person responsible') for reports related to project systems. It is however not working.

Examples of the reports that I am using are:

S_ALR_87013555: Project Results

S_ALR_87013611: Cost Centers: Actual/Plan/Variance

What authorization objects would be used to restrict access to certain projects in reports based on person responsible?

Thanks,

Re: Restricting project system reports

mvoros — Wed, 16 Mar 2011 00:38:32 GMT

Those reports are using logical DB PSJ so those check should be there. If you run ST01 what do you get?

Cheers

Re: Restricting project system reports

Former Member — Wed, 16 Mar 2011 17:38:59 GMT

Hi Martin,

I ran ST01 and it looks like the authorization checks are taking place and done correctly.

For example, the authorization object C_PRPS_VNR is checking that PS_VERNR = 1 for that user, but this user is set for PS_VERNR = 3, thus it is returning RC=4, which is as expected. This means that it should reject the user from access to the project in this report (S_ALR_87013534). However the report is still showing up. What can be the problem?

Re: Restricting project system reports

Former Member — Thu, 17 Mar 2011 00:51:14 GMT

Turns out another authorization object was letting the project be read. Used ST01 to diagnose this. It was very helpful.