topic Re: Archiving authorization in Application Development and Automation Discussions

Archiving authorization

Former Member — Tue, 07 Jan 2014 06:07:48 GMT

Dear Experts,

How should we provide authorization for archiving object "RL_TA", used for archiving TO data? Also for MM_EKKO used for archiving Purchase Orders.

Thanks in advance.

Regards,

Shanthi Priya

Re: Archiving authorization

Former Member — Tue, 07 Jan 2014 06:31:51 GMT

1. For Purchase order Archiving (MM_EKKO ) use below authorization objects.

M_BEST_EKO

M_BEST_EKG

M_BEST_BSA

M_BEST_WRK

2. For RL_TA use below authorization objects.

CON_BER_BWLVS

CON_BER_LGNU

CON_BER_LGNUM

CON_BER_TCOD

CON_BER_SFUNC

Re: Archiving authorization

Former Member — Tue, 07 Jan 2014 06:34:31 GMT

Hi,

go to SUIM transaction and try to get the correct roles and authorization objects!

Re: Archiving authorization

Former Member — Tue, 07 Jan 2014 06:49:01 GMT

Hi,

I'm not aware of setting authorization. When i tried archiving using RL_TA & MM_EKKO objects, i got authorization issue and the arching process is getting cancelled. How should i clear this?

Re: Archiving authorization

Former Member — Tue, 07 Jan 2014 06:53:56 GMT

go to t code SU53 and send the details to your BASIS team, they will resolve it..!!!

Re: Archiving authorization

Former Member — Tue, 07 Jan 2014 06:55:05 GMT

Hi,

Using TCODE SU53, whether you can not have the authorization. you can get which object you don't have. then add this object authorization.

Regards,

Yawa

Re: Archiving authorization

FredericGirod — Tue, 07 Jan 2014 07:43:32 GMT

SU53 is a bad friend.

used the authorization trace : ST01

SU53 will give you only the last authorization object checked, you can't be sure it's the one you are searching.

regards

Fred

Re: Archiving authorization

Former Member — Tue, 07 Jan 2014 09:17:43 GMT

AUTHORITY-CHECK OBJECT 'S_ARCHIVE'

ID 'ACTVT' FIELD '01'

ID 'APPLIC' FIELD 'MM

ID 'ARCH_OBJ' FIELD 'RL_TA'.

Which tables are checked when the above statement is run?

Re: Archiving authorization

Former Member — Tue, 07 Jan 2014 09:21:49 GMT

go to SU21 - check the object- double click and change the permitted activities

Re: Archiving authorization

RaymondGiuseppi — Tue, 07 Jan 2014 09:27:19 GMT

Look at help.sap.com, all required information is detailled, e.g. : Authorizations for MM_EKKO (MM-PUR) or Authorization Checks in Warehouse Management System (WMS).

Regards,

Raymond

Re: Archiving authorization

Former Member — Tue, 07 Jan 2014 10:20:57 GMT

Hi kiran, please look at the attachment and let me know how i can edit it

Regards,

Shanthi

Re: Archiving authorization

Former Member — Tue, 07 Jan 2014 10:25:18 GMT

Hi,

When i debugged the program i got sy-subrc = 4 when i ran the below statement. I dont understand it in detail. Does it check whether ACTVT = '01', APPLIC = 'MM', ARCH_OBJ = 'RL_TA'? If so which table is checked for the values for each id?

AUTHORITY-CHECK OBJECT 'S_ARCHIVE'

ID 'ACTVT' FIELD '01'

ID 'APPLIC' FIELD 'MM

ID 'ARCH_OBJ' FIELD 'RL_TA'.

Regards,

Shanthi

Re: Archiving authorization

former_member187748 — Tue, 07 Jan 2014 10:28:11 GMT

Hi Shanthi,

just click the pencil icon in the right hand side, it will take you in change mode.

Where you can change the activities.

Re: Archiving authorization

Former Member — Tue, 07 Jan 2014 10:29:48 GMT

You can't do it that way! you have to be first find the roles and subsequently profiles and assignment to the user

Re: Archiving authorization

former_member187748 — Tue, 07 Jan 2014 10:34:21 GMT

Hi Shanthi,

please see this

AUTHORITY-CHECK OBJECT 'S_ARCHIVE'

ID 'ACTVT' FIELD '01'

ID 'APPLIC' FIELD 'MM

ID 'ARCH_OBJ' FIELD 'RL_TA'.

IF SY-SUBRC EQ 0.

ELSE.

MESSAGE 'YOU ARE NOT AUTHORISED ' TYPE 'E'.

ENDIF.

Re: Archiving authorization

former_member187748 — Tue, 07 Jan 2014 10:39:05 GMT

Hi Kiran,

he has shown that he is in the screen for maintaining the authorization objects,

from where he can do by permitted activies.

Is this not a good way ? I wants to know it for myself.

Re: Archiving authorization

arivazhagan_sivasamy — Tue, 07 Jan 2014 10:45:05 GMT

Hi Shanthi,

Using this Tcode S_BCE_68001420, then click all selections in above, you can check whether particular user having authorization for this object.

If yes, sy-subrc value will be 0.

Arivazhagan S

Re: Archiving authorization

Former Member — Tue, 07 Jan 2014 10:46:53 GMT

Hi Shanti,

go to SU01 -your usr id - change - go to the roles tab : give the role SAP_BC_CCM_DATA_ARCHIVING

log of and try

Re: Archiving authorization

Former Member — Tue, 07 Jan 2014 10:51:15 GMT

No Sanjev, it will show only where used list from where the authority objct is used!

we need to maintain the authorization via PFCG txn: first need to create the role with necssary authorizations and objects.

then role will assigned to the user!

Re: Archiving authorization

former_member187748 — Tue, 07 Jan 2014 10:56:23 GMT

Ok Kiran,

thanks a lot for this information, because when i have used AUTHORITY CHECK concept,

these stuff was done through basis, and functional ends, i have done coding only to check.

Anyhow thanks a lot again.