Authorization Objects for Documents

Definition
The document management authorization objects are elements of the standard R/3 System
authorization concept.
They enable you to use complex authorizations for processing documents and their original
application files.
Use
Document processing is organized in accordance with your companys structure. !aster data for
all application areas is often created at one central location. Data that is specific to an application
area is then added using the Change function.
The authorization system can be set up accordingly. "ccess authorizations are controlled #ia
#arious authorization objects.
$f you want to lin% the document to other S"& objects' the system also executes the authorization
chec%s from the appropriate application areas while you are processing.
$f you execute document management functions from within engineering change
management your' the system chec%s the authorizations for engineering change
management. The authorization objects are allocated to the Production
Planning object class.

(ou need not %now the indi#idual authorization objects in detail if you generate
the authorization profiles for the indi#idual acti#ity groups using the profile
generator.
Structure
The authorization objects for documents are assigned to the Document Management object
class. )our authorization objects are defined for the Document !anagement System in the
standard system.
Authorization Object C_DRAW_CD !Acti"ities for Documents#
The following table shows authorization object *+DR",+T*D. This object controls which users
can process which document info records' based on a combination of acti#ity and document type.
$ields Possible %alues Descri&tion
"*T-T
."cti#ity/
01
02
03
03
14
*reate
*hange
Display
Delete
!aintain number range object
D56"R
.Document type/

The acti#ities can be executed for the document
type.
Authorization Object C_DRAW_CS !Status De&endent Authorization#
The following table shows authorization object *+DR",+T*S. This object controls which users
can process which document info records' based on a combination of acti#ity' document type'
and status.
$ields Possible %alues Descri&tion
"*T-T
."cti#ity/
01
02
03
03
*reate
*hange
Display
Delete
D56"R
.Document type/

The acti#ities can be executed for the document
type.
ST"T7S
.Document status/


Authorization Object C_DRAW_SA !Document Status#
The following table shows authorization object *+DR",+ST". This object controls which
status.es/ can be set for which document type.
$ields Descri&tion
D56"R
.Document type/
The statuses are allowed for this document type.
D56ST
.Document status/


Authorization Object C_DRAW_'(R !Authorization (rou&#
The following table shows authorization object *+DR",+89R. This authorization object allows
you to limit access to indi#idual documents.
$ields Possible %alues Descri&tion
8:9R7
."uthorization group/
0000 ; <<<< 7sed to restrict the authorizations for document
maintenance further.

Authorization Object C_DRAW_DO) !Document Access#
The following table shows authorization object *+DR",+D56. This authorization object controls
which original data of a specific document type there are access authorizations for.
$ields Possible %alues Descri&tion
"*T-T
."cti#ity/
=2
=3
=>
==
=3
=4
*hange application start
Display application start
Display archi#e application
*hange archi#e application
Display archi#e
Store archi#e
D56"R
.Document type/

?ere you enter the document type that access to
original data is allowed for.

Authorization Object C_DRAD_O'* !Object +in,#
The following table shows authorization object *+DR"D+58@. This object controls which users
can process which document info records' based on a combination of acti#ity' object' and status.
$ields Possible %alues Descri&tion
"*T-T
."cti#ity/
01
02
03
03
*reate
*hange
Display
Delete
D5658
.5bject/

(ou must enter the data base table for the objects
here .for example' !"R" for material record/.
ST"T7S
.Document status/


There are additional chec%s for document distribution.
Authorization Objects for Document
Distribution
Definition
The document distribution authorization objects are elements of the standard the SAP System
authorization concept.
Use
The document distribution authorization objects allow you to control authorizations for maintaining
part orders and sending documents.
Structure
The authorization objects for document distribution are allocated to the Document Management
object class. Two authorization objects are defined for document distribution in the standard
system.
Authorization Object C_DR-A_CD !Acti"ities for Reci&ient +ists#
The following table shows authorization object *+DR<"+T*D. This object controls which
acti#ities a user is allowed to perform for recipient lists.
$ields for the Authorization Object C_DR-A_CD
$ields Possible %alues Descri&tion
"*T-T
."cti#ity/
01
02
03
03
>1
"A
*reate
*hange
Display
Delete .only own recipient lists/
Delete .administrator/
Send .start distribution with recipient list/
Authorization Object C_DR-._CD !Distribution Order#
The following table shows authorization object *+DR<$+T*D. This object limits part order
processing.
$ields for the Authorization Object C_DR-._CD
$ields Possible %alues Descri&tion
"*T-T
."cti#ity/
01
02
03
0>
0=
03
04
0B
Start the distribution manually from the distribution
log
Start the distribution again from the distribution log
Display the distribution log
*onfirm receipt
*onfirm output
$gnore distribution order
Display mail from the distribution log
Delete temporary files from the application ser#er
.ntegration
The following document management authorization objects are also chec%ed for document
distributionC
Authorization Object Descri&tion Acti"it/
*+DR",+T*D "cti#ities for documents
03 Display
=A Distribute
*+DR",+89R "uthorization group

*+DR",+D56 "ccess to original file
=3 Display #ia application
=> Display #ia application from
archi#e

"part from this' there is also the authorization chec% for a user exit that you may ha#e
programmed for document status.
Authorization Objects
The authorization concept in Engineering Change Management is deri#ed from the general
authorization concept of the R/3 System. The general authorization system is described in the
System Administration document.
$n addition to the authorization concept of the application .such as Bills of Material or Document
Management/' there is also an authorization concept for Engineering Change Management.
The authorization objects for Engineering Change Management are allocated to the Production
&lanning object class.
$n the standard system' the following three authorization objects are defined for Engineering
Change Management:
*hange master ; authorization group .*+":DR+89R/
*hange management ; re#ision le#el for material .*+":DR+R-1/
*hange management ; re#ision le#el for document .*+":DR+R-2/
The following tables show' for each of these authorization objects' which fields control the user
authorizations for change management.
Authorization Object for Authorization (rou&
This table shows the authorization object *+":DR+89R. This object controls' for example'
whether a user can create' change' or display change masters. ?owe#er' there may be certain
change masters that you want to ma%e a#ailable only to particular groups of users. )or this
purpose' you can define authorization groups.
$ields of Authorization Object C_A01R_'(R
$ields Possible "alues Meaning
"*T-T
.acti#ity/
01
02
03
03
22
43
B1
*reate
*hange
Display
Delete .change master/
:nter .change number in object/
Digital signature
Schedule .change number/
8:9R7
.authorization group/
0000 ; <<<< 7sed to further restrict the
authorizations for the change master
.change header/.

Authorization Object for Re"ision +e"el !Material#
This table shows the authorization object *+":DR+R-1. This object controls whether a user can
create or change re#ision le#els for a material.
$ields of Authorization Object C_A01R_R%2
$ields Possible "alues Meaning
"*T-T
.acti#ity/
01
02
*reate
*hange

The authorization system is described in greater detail in the System Administration document.
Authorization Object for Re"ision +e"el !Document#
This table shows the authorization object *+":DR+R-2. This object controls whether a user can
create or change re#ision le#els for documents.
$ields of Authorization Object C_A01R_R%3
$ields Possible "alues Meaning
"*T-T
.acti#ity/
01
02
*reate
*hange