ChaRM: Limiting CRM-UI search result through authorizations?

[Former Member]

Hi All,

We have implemented ChaRM on Solution Manager 7.1 SP8 and are using CRM-UI.

The Solution Manager is used by several customers/organizations as a central platform for Change Request Management.

Everybody uses the same transaction types ZMCR for Requests and ZMHF for urgent changes (ZMMJ are not used).

We have a separate maintenance project for every organization and also set up authorization roles so that somebody from organization A when creating a CR can only choose the projects assigned to him/her and not projects of organization B.

The same goes for the iBase components, those are also only selectable if they have the right role.

Now we have the issue that when somebody carries out a search in SM_CRM --> "Change Request Mgmt" --> "Requests for Change" --> "Search"

button he/she can see all the change requests from all the organizations which in this case is  bad thing and shouldn't be possible.

Running a trace on authorizations while pressing the "search" button returned very little that we could use. The CRM-UI search doesn't seem to care much about any authorization object useable for separation of projects or authorizations.

We also tried to limit the authorizations for CRM transactions according to the wiki article http://wiki.scn.sap.com/wiki/display/SMAUTH/UC00035 , but apart from it not working (which is another story) it doesn't seem to do the trick for CRM-UI searches.

Did anybody ever encounter a similar problem? Do you have any suggestions on how to implement the requirement of different search results for different organizations?

Many thanks in advance

Richard

[Lluis · Accepted solution]

Hello Richard,

You can do that using Organization Model in Solution Manager, with some customizing or with a lite piece of custom code.

Check that posts:

• http://scn.sap.com/community/it-management/alm/solution-manager/blog/2013/06/05/limit-the-number-of-...

• http://scn.sap.com/community/it-management/alm/solution-manager/blog/2013/05/17/limit-the-number-of-...

Hope that can help you,

Luis

[Former Member · Accepted solution]

Hi Luis,

Thanks a lot for your input, it shows some good possibilities that we could use.

I kind of was hoping that it could be accomplished without the org model, because it would require us to integrate 650+ users into the org model (which is a really basic one so far).

At least we have a starting point now, maybe we could use your information about the badi and get the search to check for iBase component or for the project assignment in the auth roles by help of the CRM_ORDER_AUTH_CHECK badi.

Thanks again

Richard