Query Hierachy Input Parameter (F4) selection, User customized

[Martin_4]

Desired result is, that a SAP User with defined access rights can see and choose in the  query input only those hierachie trees and leaves which he is authorized for.

The authorization rights  for each single SAP User are available in a flat view consisting of  (SAP User- Country -Region -- Company Code).

Current design Hierachy Tree:

A Hierachy Tree of 0HIER_NODE (Root=Betriebe Gesamt =  All Plants), ZMO_CNTRY (Country Node = DE, AT), ZMO REGION (Region Node: BER, FRO), ZMO_CCODE (Company Code Leave=5070, 8000):

Current design - Query input:
The current input parameter allows the user to chose among any Country, Regions, Company Codes, if he is authorized or no. If the SAP User is not authorized, this results in a Autorization Access error, which is not desires.

Current design - Query result:
This visualizes the  AfO result for a SAP User which is authorized for all countries, regions, company codes:

Current design – Query line:This is the design of the filter in the query, which brings the hierachy

Current design – above Query filter for multi entry selection:

Hierachy node, Mulit entry, input ready  variable of the filter which allows the multibed entry

Current design – Authorization filter:

Authorization Variable which limits the user only to the authorized Country Region Company code

The Analysis authorization object  ZMO_CODE  is defined and this pulls out  via an Badi Exit  $ZMO_VAR_COMPCODE02 dynamically, user dependant  the relevant Company code authorizations, what brings if violated, if he requests in the tree Countries, regions or company codes he*s not assigned to the AfO the “…not authorized message…”

Further more ZMO_CNTRY , ZMO REGION  (and ZMO_CCODE)  is authorization relevant and have the same methods, antries in the authorization objects and variables like  $ZMO_VAR_COMPCODE02 applied

----->>>>>
What now the mult millon $ design to have in the AfO Input Parameters only the tree compontents a user is authorized for ?
<<<<---------------
For example a user is just Autorized for Country = DE, Region=BER, Company Codes 5070, 5150, 5160 this result:

…and not this:

What are the customization to be used to have in an input Parameter a customized list, according to authorizations ?

Thank You !

Best Martin

[nachtaktiv]

Did you check the possibilities of the BAdI RSR_VARIABLE_F4_RESTRICT
to filter the F4-help to individual values ?

[Martin_4]

Cant plug this together.
SAP F4 Badi Help is not to helpfull, better fractional  at all.

You have a sample ?
What Variable,  needs what type of exit ?

This is more magical work with much guessing, try and error than computer sience.

I set up a Badi, guessed that ~GET_RESTRICTION_FLAT could do it,
and an exit but in RSRT debug  the query even does not go to the BREAK-POINT, why so ever:

method IF_RSR_VARIABLE_F4_RESTRICT~GET_RESTRICTION_FLAT.

DATA: ls_range LIKE LINE of c_t_range,
lt_values_ZMO_REGIO TYPE /BIC/OIZMO_REGIO,
lt_values_ZMO_CNTRY TYPE /BIC/OIZMO_CNTRY.

BREAK-POINT.

CASE i_vnam.

  WHEN 'ZMO_VAR_COMPCODE07_NODE_RESTR'.

    SELECT     country
* CDS joined to an Authorization CDS containing the Fieldvalues needed:
    FROM       ZMO_COMPANY_HIERARCHIE_SAC
    GROUP BY   country
    INTO @DATA(CNTRY).

    CLEAR ls_range.
    ls_range-iobjnm = 'ZMO_CNTRY'.
    ls_range-sign   = 'I'.
    ls_range-option = 'EQ'.
    ls_range-low    = CNTRY.
    APPEND ls_range  TO c_t_range.

    ENDSELECT.

ENDCASE.

[andrea_previati]

Hi

the topic regarding auth on F4 seems to be an eternal return of the same for every BW project

regarding rsr-variable-f4-restrict-badi you can check this detailed how to: 

https://community.sap.com/t5/technology-blogs-by-members/rsr-variable-f4-restrict-badi-with-compound...

the main criticality in that scenario is to maintain a DSO  ( usually loaded by CSv) with the Country, Region, Company,  authorizations for each user. These data will be retreived by the badi methods and displayed in the F4

Hope it helps

Andreas

[andrea_previati]

sorry wrong link . Right link below

https://community.sap.com/t5/additional-blogs-by-members/bex-query-control-the-values-which-are-show...

regards