Question:
My problem is like if somebody can change a document type 001 for authorization group 1 and can only display document type 002 for authorization group 2 he can change all document info records for document type 001 and authorization group 2. Hope my problem makes sense.
Please Help
Regards Peet
Answer:
If you are saying what you I think you are saying....
A user needs to change a doc type 001 for auth group 1
A user needs to display doctype 002 for auth group 2
Currently they can change & display both.
Assuming that there is an auth group for each doc type, and you want change and display in one role, you need to copy the object in the role (Edit->copy authorisations). In one object put change activity for auth group 1, in the other object put display for auth group 2
This will create 2 authorisations which will be evaluated independently of each other
Answer:
Peet,
Good morning. What you're looking to do will require a custom solution since the C_DRAW_BGR auth object does not contain ACTVT.
What you'll want to do is first create a custom auth object that contains, at minimum, ACTVT and BEGRU fields - you might want to consider having DOKST in the object, as well, depending on your versioning strategy.
Then activate and code a couple BADIs to perform auth checks:
DOCUMENT_MAIN01 General document exits
Method: BEFORE_SAVE (control create access to auth groups)
DOCUMENT_AUTH01 DMS authorization check
Method: CHECK_AUTHORITY (control the change access)
Regards,
Vincent
Answer:
Hi
Thanks for the information I will look at the BADI option, as it seems this will solve my problem. Although I never work with BADIs before it is time to start using it.
Regards
Peet