Securing Attachments to Purchase Orders

[Former Member]

We have a business need to use Generic Object Services (GOS) to attach documents to business object BUS2012. However, we only want a certain group of people to be able to delete the attachments. We cannot find a way to secure this via a standard security object. We are investigating how to override the display of the delete button in the CL_SREL_LIST_BROWSER.CREATE_TOOLBAR method, but have not figured out how to override the standard SAP method.

Has anyone put in this type of security? If not, where can I find out how to override the standard SAP delivered class method?

[Former Member]

We have a business need to use Generic Object Services (GOS) to attach documents to business object BUS2012. However, we only want a certain group of people to be able to delete the attachments. We cannot find a way to secure this via a standard security object. We are investigating how to override the display of the delete button in the CL_SREL_LIST_BROWSER.CREATE_TOOLBAR method, but have not figured out how to override the standard SAP method.

Has anyone put in this type of security? If not, where can I find out how to override the standard SAP delivered class method?

[athavanraja]

check this online help

http://help.sap.com/saphelp_nw04/helpdata/en/15/7b623c28695c63e10000000a11405a/frameset.htm

[Former Member]

Thanks for the lead. However, we cannot find transaction SGOS nor the BADIs GOS_SRV_REQUEST and GOS_SRV_SELECT in our 4.6C2 environment. Do we need to install an add-in or be at a particular patch level to have these available?

Kevin

[Former Member]

Found note 491271 - Authorizations for generic object services. The object services authorizations are heavily dependent on the Basis release. For 4.6C we need to look at the entries in the SGOSATTR table and determine which class is being called. We are going to try creating a subclass of the existing one in the table and then update the entry in the SGOSATTR table to use our class instead of the standard one. More soon...

[Former Member]

We decided to copy the classes ZCL_GOS_ATTACHMENT_LIST and ZCL_GOS_SRV_VIEW_DOCS and reimplement method ADD_BUTTON for interface IF_SREL_BROWSER_COMMANDS. Then we updated the entry in SGOSATTR for CL_GOS_ATTACHMENT_LIST to use our new ZCL_GOS_ATTACHMENT_LIST for the attachment list function.