ACL for project reports

[former_member244310]

Hi Gurus

I have applied ACL functionality to my projects, then I have assigned SAP User ids to the project.

The users who are not assigned in ACL are not able to display or edit the Project.

But the users who are not assigned to the project ACL are able to see the project related reports

I would like the users who are not assigned to the project to not be able to see project reports like CJI3, CN41 & other project reports of the concerned projects. If the user is assigned to the projects, then they should be able to see the project reports.

Is this possible using ACL functionality?

Please tell me how to achieve this functionality in SAP PS

regards

HR

[former_member388328 · Accepted solution]

Hi Hanumantha Rao,

Please use  EXIT_SAPDBPSJ_001 for Authorizations check in PS reports. This exit will work for all PS reports. Try to call ACL tables in this  exit.

Thanking you

Vengaiah

[former_member244310 · Accepted solution]

Hi Vengaiah

Please give me some more details on how you were able to achieve the authorisation. How was the coding done? What was the logic used?

Appreciate if you could provide some help.

Thanks for the info

HR

[former_member244310 · Accepted solution]

This message was moderated.

[former_member388328 · Accepted solution]

Hi Hanumantha Rao,

What is Version of your system. Are you ok  to do a Enhancement spot..  Based on that i can suggest.

Thanking you

Vengaiah

[former_member388328 · Accepted solution]

Hi Hanumantha Rao,

Assuming that you are on some lower version of SAP. Please use below code to get the required functionality.

In  user exit CNEX0002 PS Authorization check  you have  below function exits.

In each function exit put this the respectively,

EXIT_SAPLCNAU_001

(This  EXIT is for Project definition  PROJ)

******************************************************************************

DATA : IT_PSACL_TAB TYPE TABLE OF PSACL_TAB.

SELECT * FROM PSACL_TAB INTO TABLE IT_PSACL_TAB WHERE OBJNR = SAP_PROJ-OBJNR AND AUTH_USER = SY-UNAME.

   IF sy-subrc is INITIAL.

     SAP_X_ACTVT = 'X'.

   ENDIF.

**********************************************************************************

EXIT_SAPLCNAU_002

(This exit is for WBS table PRPS)

******************************************************************************

DATA : IT_PSACL_TAB TYPE TABLE OF PSACL_TAB.

SELECT * FROM PSACL_TAB INTO TABLE IT_PSACL_TAB WHERE OBJNR = SAP_PRPS-OBJNR AND AUTH_USER = SY-UNAME.

   IF sy-subrc is INITIAL.

     SAP_X_ACTVT = 'X'.

   ENDIF.

**********************************************************************************

EXIT_SAPLCNAU_003

(this exit is for  Network Header  table CAUFV )

******************************************************************************

DATA : IT_PSACL_TAB TYPE TABLE OF PSACL_TAB.

SELECT * FROM PSACL_TAB INTO TABLE IT_PSACL_TAB WHERE OBJNR = SAP_CAUFV-OBJNR AND AUTH_USER = SY-UNAME.

   IF sy-subrc is INITIAL.

     SAP_X_ACTVT = 'X'.

   ENDIF.

**********************************************************************************

EXIT_SAPLCNAU_004 

( this exit is for  Network Activity table AFVGD )

******************************************************************************

DATA : IT_PSACL_TAB TYPE TABLE OF PSACL_TAB.

SELECT * FROM PSACL_TAB INTO TABLE IT_PSACL_TAB WHERE OBJNR = SAP_AFVGD-OBJNR AND AUTH_USER = SY-UNAME.

   IF sy-subrc is INITIAL.

     SAP_X_ACTVT = 'X'.

   ENDIF.

**********************************************************************************

PSACL_TAB is main table for ACL , to store which user has , what authorization.

CAUTION.. This code might cause some performance drain... on report generation,

And also Test them Properl;y.

Thanking you

Vengaiah

[former_member244310 · Accepted solution]

Hi Vengaiah

My system is on EHP 7 SAPKH61707

I am willing to do an enhancement for achieving the authorisation based on ACL for PS reports

thank you very much

Arvind

[former_member388328 · Accepted solution]

Above code will work even latest version.

Thanking you

Vengaiah

[sunil_yadav2]

Hi Hanumantha,

Please check SAP Note 1960634 for reporting along with ACL.

thanks

Sunil

[former_member244310]

Hi Sunil

I am using SAP_APPL 6.17 with EHP7 SAPKH61707 pack

The note seems to be already applied, but the functionality of ACL is not working for reports.

Can you tell me what is to be done to achieve ACL functionality for reports? What exactly is the correction that needs to be applied?

Is it working for PS reports in your system?

HR

[sunil_yadav2]

Hi Hanumantha,

Currently i am not using ACL so you have to check with ABAP Consultant whether the suggested code is available or not in your current system. also check below SAP Note which is showing latest release.

  2097046 - ACL not considered in PS-IS reporting -III

1986444 - ACL not considered in PS-IS reporting - 2

thanks

Sunil

[seankeaney]

Hello HR,

Please note that ACL does not extend to include reports. This is detailed in the SAP note -

1646020 - ACL not considered in PS-IS reporting

Thanks,

Sean