2008 Dec 05 3:35 AM
Hi all,
Do you know of a standard authorization to give a user a complete read-only authorization? Kind of like "sap_all" but only to read?
Thanks,
Samer
2008 Dec 05 5:53 AM
Hi Sameer
You dont have any profile as read only.
You have to adopt reference SAP_ALL as template and you have to change all the values to 03 so that it can be display only.
Thanks and Regards
Arun R
2008 Dec 05 3:59 AM
Hi Samer,
There is no such standard authorization like SAP_ALL with read access only.You would have to create one.There are several threads related to this.Please search for it in the forum.
Thanks,
Saby..
2008 Dec 05 5:53 AM
Hi Sameer
You dont have any profile as read only.
You have to adopt reference SAP_ALL as template and you have to change all the values to 03 so that it can be display only.
Thanks and Regards
Arun R
2008 Dec 05 8:10 PM
Hi all,
Thank you for your posts, i just have one more question. After I created the new profile and adopted SAP_ALL, i'm not sure where I should change all the values to 3. Where are these values?
2008 Dec 05 9:40 PM
It is very difficult to explain it in one shot. You need a magic training which I think is taught in a course called ADM940.
2008 Dec 09 8:44 PM
Hi Sameer
You can not change all the values of the activity to 03 at one shot but you need to go in manually to individual authorisation object and identify the display options.
As Julius suggested some authorisation object would have other than activity. We need to identify what exactly the need of that corresponding authorisation object and provide the value.
Thanks and Regards
Arun R
2008 Dec 05 6:08 AM
2008 Dec 05 6:32 AM
Use the search for SAP_ALL_DISPLAY. This has been covered a few times before
You can create wide access display roles but you need to be careful as there are plenty of auth objects with display activities which are not only 03.
2008 Dec 09 2:50 PM
2008 Dec 05 8:07 AM
There are also many fields of objects which are "action" or "activity" related, but they are not the ACTVT field.
For some of them, the NAME field will determine whether the user can display or change.
In other special cases, the program context will determine the activity (field PROGRAM) as the different "programs" of the same object do different things.
Good luck!
Julius