Apologies if this has already been answered but I have spent two days scouring the internet and these forums in frustration
We are trying to get Send to Inbox working so that a user can send a document to users in their own group only. I’m currently at the point where a user can see ALL other users in the list (even there is no obvious security setting that is allowing this) and send to any one of them but they cannot see any groups in the list of groups. Once they select a user the actual sending works fine!
Is it out of the box functionality that allows a user to see all users without there being any View right applied to the user list, and how can I enable each group to only see their own groups without having to do this manually every time a group is set up!
Any advice appreciated (before I log a call with SAP). We’re on 4.0 SP8 by the way.
I’m not sure about 4.0, but I’ve done this in XI3 and BI4.1. This has to do with the user’s View access to users and groups. We have a “Group Self Visibility” access level that only includes the permission to “View objects” on Users (see first attachment). This CAL is then applied to the group, with the group as the principal.
In Users and Groups → Top Level Security → Users, we give Everyone “View objects” permission but on object only (see second attachment). You have probably granted this permission on objects and children, which is why your users see everyone else.
We do not want our users to send documents to entire groups, so they will only see users in the destination list. I assume this could be changed by modifying our CAL to include View objects on User Groups, but I have not tried it.
I remember having spent a long time with sap bo techsupport at the time I did it (2008) and it was a bit tricky. In the other hand, I don’t think there is only one solution because it depends the way you set-ut your security. maybe I can search for doc regarding the steps I followed. Send me an email privately
Thanks for the solution. I have tried this on a couple of our groups and it seems to work fine.
I guess I was hoping for a solution that we didn’t have to implement every time we set up one of our high level groups but that might be asking a bit too much!
I hear you, but it’s not as bad as it seems. We have a standard procedure for setting up new groups (add Connection/Universe/Public folder, apply rights, etc.), so this is just one more step.
(BOB member since 2002-08-29)
(BOB member since 2003-05-26)
(BOB member since 2002-08-29)