Security for General Object Services

[Former Member]

Trying to restrict authorizations for GOS at the document type level.

We are currently in 4.6c. We are using the authorization object S_WFAR_OBJ to restrict document type, object type, and the activity level. This authorization object works as expected when a user goes into tcode OAWD(SAP ArchiveLink: Store documents) but if a user goes into another tcode such as XK03(Display vendor (centrally) the user can then attach for any document type using the Global Object Services icon.

Does anyone have any suggestions on how to control what document types when using the GOS icon?

Thanks

Eric

[Former Member]

Eric,

Try this as it will work for you.

Using T-code SE16 view table TACTZ

This will tell you the valid activites ACTVT for you auth object

Now it should be possible to change the one you don't want in T-code XK03

Let me know if you want me to eleborate.

[Former Member]

I'm going to need you to elaborate. I don't want to get hung up on particular tcode. I was just giving XK03 as an example.

Thanks

Eric