Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

How to restrict Global default layout setting by users ? Authorization

Former Member
0 Kudos

Hi Guru's,

Currently users are able to set their own report layout as the global default layout.

can we provide solution on how to prevent users from setting default layout for reports.

Users should be restricted to set user specific report layout only.

Authorization object S_ALV_LAYO will do the work for us,but the issue is we want this restriction only for some transactions and not all..

Dont know whether this can be done by ROLE-Transaction specific???

As far as I know if we unassign this Autho Object User will not be able to change Default layout for any of the reports /Transactions..

Does any one knows how an we achieve this???

Regards

Vikrant M Kelkar

1 ACCEPTED SOLUTION

Former Member
0 Kudos

Hi,

Authorization for S_ALV_LAYO should be restricted to endusers as it allows changes to Global settings. We in our company have a security policy against against assigning it to any of the job roles.

Some applications like FICO have the object F_IT_ALV for the layout settings. I am not sure whether it exists for every module.

However in certain transactions in applications like MM & SD the authorization to S_ALV_LAYO is built in the program for the transaction and we do not specifically authorize for the object in their roles.

10 REPLIES 10

Former Member
0 Kudos

S_ALV_LAYO authorisation object with field ACTVT, possible value is 23.(administrator)

If user have this value than user can change the global/default lay out.

If you remove this authorisation, user should able to save user specific lay out and can not change the global lay out.

If you want to restrict this to only certain number of transaction than, you first need to remove the authorisation from respective roles and assign only to them where you want to allow.

However, you need to make sure that, combination of roles (with and without S_ALV_LAYO) will still allow them to change it.

Former Member
0 Kudos

Hi,

Authorization for S_ALV_LAYO should be restricted to endusers as it allows changes to Global settings. We in our company have a security policy against against assigning it to any of the job roles.

Some applications like FICO have the object F_IT_ALV for the layout settings. I am not sure whether it exists for every module.

However in certain transactions in applications like MM & SD the authorization to S_ALV_LAYO is built in the program for the transaction and we do not specifically authorize for the object in their roles.

0 Kudos

>

> Hi,

> Authorization for S_ALV_LAYO should be restricted to endusers as it allows changes to Global settings. We in our company have a security policy against against assigning it to any of the job roles.

>

> Some applications like FICO have the object F_IT_ALV for the layout settings. I am not sure whether it exists for every module.

>

> However in certain transactions in applications like MM & SD the authorization to S_ALV_LAYO is built in the program for the transaction and we do not specifically authorize for the object in their roles.

Use F_IT_ALV for personal layout. You don't want everybody having access to the global layout S_ALV_LAYO. Your trace might show and will be looking for S_ALV_LAYO but F_IT_ALV is your solution.

Search on S_ALV_LAYO. The search feature is your friend.

Former Member
0 Kudos

Hi Vikrant,

Please check out the following SAP notes #409190 and #601803 which will be helpful to you.

Thanks,

Saby..

0 Kudos

Hi All,

Thanks for your replies...

Issue we are having is when we try to activate this autho object S_ALV_LAYO then by default it takes Value "23" as ticked and doesnot allow us to Untick it(So that we can stop the Authorization)..

Any Clues...

Regards

Vikrant M Kelkar

0 Kudos

The object S_ALV_LAYO has only one actvity 23 defined for it. If you are going to activate it then there is no point in rremoving the tick. You can have only one of the two options deactivate the object completely or activate it with actvt 23.

charmaine_greene
Explorer
0 Kudos

Hi Vikrant

You can restrict S_ALV_LAYO to certain transactions by using SU24 - here you can check/uncheck transactions assigned to auth object.

However if you do this you need to check that there is no impact to existing functionality - the running of batch jobs etc.

Regards

Charmaine

Former Member
0 Kudos

Thanks evryone ..This is sorted now..

0 Kudos

Hi Vikrant,

Could u let us know the solution sorted for this issue.

Thanks in Advance.

0 Kudos

Hi,


apart from S_ALV_LAYO, Use the object F_IT_ALV to restrict Global Layout modifications (Avoid giving Activity 70).


Regards,

Rama