Restricted access to confidential documents in DMS

[Former Member]

Hello Gurus,

Need your expert guidance on the following requirement.

The requirement is to restrict the access of the document to users like Author, Reviewer and Approver, for all the documents.

I am confused which authorization object will work in my case and what settings I've to maintain for this.

Authorization Object C_DRAW_BGR u2014 Authorization Group

Authorization Object C_DRAW_DOK u2014 Document Access

Authorization Object C_DRAW_TCD u2014 Activities for Documents

Say I am having document types to us those are confidential.

ABC (finance docs)

LMN (Legal docs)

XYZ (design docs)

We want to allow only the users who are having below roles.

DMS_APPROVER

DMS_REVIEWER

For rest of the user we don't want to allow change/display acccess to the above documents.

Please guide me how to proceed, what need to be done.

Regards,

Ganesh

[Former Member · Accepted solution]

Hi Ganesh,

Kindly maintain the document type wise authorization in object C_DRAW_DOK ( keep confidential types here) . Also authorization groups as defined by you in

C_DRAW_BGR and activities like change,create etc . in C_DRAW_TCD.

Also in cross-application component field in role mainatain the t-code for which you want to give access. example: review or approve give cv02n. etc, for display only give cv03n.

I hope this will resolve the query.

Regards,

Ravindra

[Former Member · Accepted solution]

Hello Ravindra,

Thanks for the immediate response; I'll prepare the test in sandbox and let you know the results.

Regards,

Ganesh

[Former Member · Accepted solution]

Hi Ganesh,

Is your query get resolved? Or still facing the problems?

Regards,

Ravindra

[Former Member · Accepted solution]

Hello Ravindra/DMS Gurus,

Sorry, but still my requirement is not met.

Actually our business scenario is as below:

Say there is a special document Type APR (Employee appraisal document)

And for 5 different employee created (Authors) the document giving their self-inputs.

Now these employee are assigned to say 3 different Supervisors (Reviewers) and one Manager (Approver)

{Author; Reviewer and Approver are maintained in Additional Data of the document.}

So each document will have a Reviewer and Approver assigned along with the Author.

Our requirement is to restrict the access of these 5 documents to the Employees (Authors), so that none of these employee can view each others document. And allow display/change to respective Supervisor (Reviewer) and Manager (Approver) only.

We need to restrict document access based on the above scenario

After checking, I think using authorization object the above requiremment can not be met. Can we use any user exit?

Your valuable comments are appreciated.

Regards,

Ganesh

Edited by: ganesh sarasvati on Aug 12, 2010 5:35 PM

Edited by: ganesh sarasvati on Aug 12, 2010 5:37 PM

[Former Member · Accepted solution]

Hello guys,

For your information we've used badi: DOCUMENT_AUTH01 to map the scenario.

Regards,

Ganesh

[Former Member]

thanks