04-19-2006 11:09 AM
Hi,
Jobs are created by User A the Administrator. The User B supposed to be a End-User is allowed to do anything;
LIST, PROT, RELE, SHOW and PLAN
Except for Delete DELE for User A jobs. How could I allow User B to do all job operation through SM37 except for DEL for all Jobs created by User A.
Please give me the Field & the Value needed for the Authorisation Object.
Thanks,
Kishan
04-19-2006 12:14 PM
I don't think it's possible. You can also try to debug it, with adding a breakpoint to statement AUTHORITY-CHECK.
It seems there is the following check for deletion:
AUTHORITY-CHECK
OBJECT 'S_BTCH_ADM'
ID 'BTCADMIN' FIELD 'Y'.
However the same check used for creation also.
Peter
04-19-2006 11:21 AM
Hi,
Just to add I dont have to restrict it to User A there could be serveral Jobs created by many Users but User B is not suppose to DELE-Delete but do all other operation for these Jobs.
Thanks,
Kishan
04-19-2006 12:14 PM
I don't think it's possible. You can also try to debug it, with adding a breakpoint to statement AUTHORITY-CHECK.
It seems there is the following check for deletion:
AUTHORITY-CHECK
OBJECT 'S_BTCH_ADM'
ID 'BTCADMIN' FIELD 'Y'.
However the same check used for creation also.
Peter
04-19-2006 12:27 PM
Hi Peter,
With;
AUTHORITY-CHECK OBJECT 'S_BTCH_ADM' ID 'BTCADMIN' FIELD 'Y'.
I cannot restrict the User from Deleting other Users Jobs. When I use;
AUTHORITY-CHECK OBJECT 'S_BTCH_ADM' ID 'BTCADMIN' FIELD 'N'.
I cannot Repeat Schedule it say only for the current Users jobs could be Repeated. Is this a bug in SAP?
Thanks,
Kishan
04-19-2006 1:05 PM
04-19-2006 2:49 PM
>Is this a bug in SAP?
Not really a bug, it's a missing functionality.
What I'd suggest is to open an OSS message.
You might also consider the possibility to define a new auth object (with enabling all this actions) and insert a check after 'S_BTCH_ADM' check.
It would be a modification, but probable it would work.
Peter
04-19-2006 12:22 PM
Hi Kishan,
It depends on the role of user B. try to set the authorizations for user B except the delete option.
contact your BASIS to create the authority to do that.
Regards
vijay