12-01-2008 1:20 AM
Hi Guru's,
Currently users are able to set their own report layout as the global default layout.
can we provide solution on how to prevent users from setting default layout for reports.
Users should be restricted to set user specific report layout only.
Authorization object S_ALV_LAYO will do the work for us,but the issue is we want this restriction only for some transactions and not all..
Dont know whether this can be done by ROLE-Transaction specific???
As far as I know if we unassign this Autho Object User will not be able to change Default layout for any of the reports /Transactions..
Does any one knows how an we achieve this???
Regards
Vikrant M Kelkar
12-01-2008 4:52 AM
Hi,
Authorization for S_ALV_LAYO should be restricted to endusers as it allows changes to Global settings. We in our company have a security policy against against assigning it to any of the job roles.
Some applications like FICO have the object F_IT_ALV for the layout settings. I am not sure whether it exists for every module.
However in certain transactions in applications like MM & SD the authorization to S_ALV_LAYO is built in the program for the transaction and we do not specifically authorize for the object in their roles.
12-01-2008 3:11 AM
S_ALV_LAYO authorisation object with field ACTVT, possible value is 23.(administrator)
If user have this value than user can change the global/default lay out.
If you remove this authorisation, user should able to save user specific lay out and can not change the global lay out.
If you want to restrict this to only certain number of transaction than, you first need to remove the authorisation from respective roles and assign only to them where you want to allow.
However, you need to make sure that, combination of roles (with and without S_ALV_LAYO) will still allow them to change it.
12-01-2008 4:52 AM
Hi,
Authorization for S_ALV_LAYO should be restricted to endusers as it allows changes to Global settings. We in our company have a security policy against against assigning it to any of the job roles.
Some applications like FICO have the object F_IT_ALV for the layout settings. I am not sure whether it exists for every module.
However in certain transactions in applications like MM & SD the authorization to S_ALV_LAYO is built in the program for the transaction and we do not specifically authorize for the object in their roles.
01-06-2009 6:29 PM
>
> Hi,
> Authorization for S_ALV_LAYO should be restricted to endusers as it allows changes to Global settings. We in our company have a security policy against against assigning it to any of the job roles.
>
> Some applications like FICO have the object F_IT_ALV for the layout settings. I am not sure whether it exists for every module.
>
> However in certain transactions in applications like MM & SD the authorization to S_ALV_LAYO is built in the program for the transaction and we do not specifically authorize for the object in their roles.
Use F_IT_ALV for personal layout. You don't want everybody having access to the global layout S_ALV_LAYO. Your trace might show and will be looking for S_ALV_LAYO but F_IT_ALV is your solution.
Search on S_ALV_LAYO. The search feature is your friend.
12-01-2008 12:04 PM
Hi Vikrant,
Please check out the following SAP notes #409190 and #601803 which will be helpful to you.
Thanks,
Saby..
01-06-2009 7:20 AM
Hi All,
Thanks for your replies...
Issue we are having is when we try to activate this autho object S_ALV_LAYO then by default it takes Value "23" as ticked and doesnot allow us to Untick it(So that we can stop the Authorization)..
Any Clues...
Regards
Vikrant M Kelkar
01-06-2009 11:52 AM
The object S_ALV_LAYO has only one actvity 23 defined for it. If you are going to activate it then there is no point in rremoving the tick. You can have only one of the two options deactivate the object completely or activate it with actvt 23.
01-07-2009 9:24 PM
Hi Vikrant
You can restrict S_ALV_LAYO to certain transactions by using SU24 - here you can check/uncheck transactions assigned to auth object.
However if you do this you need to check that there is no impact to existing functionality - the running of batch jobs etc.
Regards
Charmaine
07-17-2009 2:47 AM
10-18-2013 7:13 AM
Hi Vikrant,
Could u let us know the solution sorted for this issue.
Thanks in Advance.
10-18-2013 11:16 AM
Hi,
apart from S_ALV_LAYO, Use the object F_IT_ALV to restrict Global Layout modifications (Avoid giving Activity 70).
Regards,
Rama