authorization in Access Control Context

[Former Member]

Hi Experts,

Hi have a authorization problem for some users in Access Controll Context ,

1. We have created an user in SAPGUI and assigned a role similar to SAP_PLMWUI_DESIGNER( we copied it and made some modifications, but nothing that should matter)

2. Then we assigned this role to a context and assigned the user to the role in SAP WUI.

3. But when we logon with this user and try to display a document which is assigned to/or owned by(we tried both) the context, we get the following message:

Document DRW/xxxxxx does not exist or access authorizations are missing

What authorization is missing, any thoughts?

Kind regards

Mikael

[Former Member · Accepted solution]

Hi Santosh,

thanks for your reply,

Yes, the user is assigned to the role in the backend.

Kind regards

Mikael

[Former Member · Accepted solution]

Have you run the report /PLMB/R_AUTH_UPDATE_RT_FROM_CP?

You need to run this report after making any changes to the ACC.

[Former Member]

Thanks!

The problem was solved after runnning the report /PLMB/R_AUTH_UPDATE_RT_FROM_CP.

Kind regards,

Mikael

[Former Member]

are you able to create a DIR of doc type DRW in PLM web UI?

If not, check in DC10 trnsaction for this doc type if ACM is enabled ??

[Former Member]

Hi Mikael,

Check whether the necessary activities are checked for object PLM_DIR in the authorizations of the role

SAP_PLMWUI_DESIGNER_ROLE. Also try assigning the role SAP_PLMWUI_OBJECT_REUSER.

Regards,

Santosh.

[Former Member]

Hi Santosh,

thanks for quick reply,

All needed activities are checked for PLM_DIR, for the moment I am not able to assign SAP_PLMWUI_OBJECT_REUSER but this should not be neccesary, should it.

I have the same problem for a user assigned to the role SAP_PLMWUI_DESIGNER.

Because of authorization issues we use all the single roles in each composite role above.

-> ie , in acc I haven't assigned the user to one composite role but all single roles separately, can this be the problem?

or can it be something else that I missed?

Kind regards

Mikael

[Former Member]

Hi Mikael,

The appropriate single role is SAP_PLMWUI_DESIGNER_ROLE (Designer (ACC authorizations)), check if the user is also assigned to this role in the backend. OBJECT_REUSER is not mandatory for your case, this role helps in reusing of documnets like assigning it to material or BOM etc.

Regards,

Santosh.