Show TOC

Process data request for signing a processing step

In a process data request, you can also define a signature to be executed for the following purposes:

In the process instruction, you define the signature as an input value.
Please note the following when defining such a data request:

The PI sheet supports different
types of signature (6) . In Customizing for the control recipe destination, you specify the type of signature to be used in the PI sheet.
Define only one signature for each table line in repeated data requests. The signature should be in the last table column, that is, you must define it as the last input value of the data request.
Depending on the type of data request, signatures are processed as follows:
You must assign a message category that contains characteristic PPPI_SIGNATURE to the process instruction.
In repeated data requests, you must enter a signature for every table line if the signature is marked as required in the message category.
You must define characteristic PPPI_SIGNATURE as an input value in the process instruction.
It is transferred to the message that is created for the process instruction. The following value is assigned to it:
The signature or name of the signatory
The key of the corresponding signature strategy
For signatures with a simple password check and digital signatures, you can specify that the user needs a special maintenance authorization to be able to enter a signature.
If several users must sign a processing step, you use a signature strategy to define the required individual signatures. You can allocate a signature strategy to the control recipe destination, thus specifying that this strategy is valid for all processing steps. If you want to use a different strategy for a specific process instruction, you must assign the strategy to the process instruction.
Signature strategies are carried out synchronously in the PI sheet by default. This means that all individual signatures must be executed immediately after one another without exiting the function.
However in process instructions you use to sign the entire PI sheet, you can determine that the signature strategy is carried out asynchronously. This means that a user can exit the PI sheet after he or she has executed the individual signature and the next user can call up the PI sheet again.

To enter the data for the signature, assign the following characteristics to the process instruction.

Characteristic Meaning Allowed values
PPPI_INPUT_REQUEST Text for input Any short text; for
request ex. "Signature:"
PPPI_REQUESTED_VALUE Input value PPPI_SIGNATURE
PPPI_SIGNATURE_ Authorization Any value allowed for
AUTHORIZATION
required (only for the Activity
simple password field in authorizat.
check or digital object C_CRPI_BER
signature)
PPPI_SIGNATURE_ Signature strategy Strategy defined in
STRATEGY (only for digital Customizing
signatures)
PPPI_SIGNATURE_MODE Synchronous or S (synchronous)
asynchronous signature A (asychronous)
process (only required
to sign PI sheets with
signature strategy)

(6) Types of signature:

The R/3 PI sheet supports the following types of signature:

Signatures without a password check

You do not need a special authorization to enter this type of signature in the PI sheet. The system does not check the signature you entered.

Signatures with a simple password check

You can use this signature type for control recipe destinations of type 1 only.

Signatures with a simple password check consist of the following:

  • A user name
  • An application-specific user password

In the process instruction for the signature, you can specify any activity for the authorization object in the PI sheet. The system checks this authorization when you enter a signature in the PI sheet.

You assign plant-specific user passwords in Customizing for Control Recipe Destinations . To do so, you must be authorized to create user master records.

Digital signatures

  • If only one signature is required, you have the following options:
  • Simple signature with signature method
If you only set the Digital signature indicator, the signature method specified in the simple signature is automatically used for all control recipe destinations to which you have not assigned a signature strategy.
For simple signatures, you assign the signature strategy you want to use to the following signature objects:
- PI sheet: process step
- PI sheet: accept invalid input values
To make settings for the simple signature, go to Customizing for Process Management and choose activity Control Recipes/PI Sheets -> Digital Signature -> Specify Signature Method for Approval Using Simple Signature.
  • Signature strategy with one individual signature
Here, you assign an additional strategy with one individual signature to the control recipe destination or process instruction.
  • If more than one signature is required, you can use the:
  • Signature strategy with several individual signatures
Here, you assign an additional signature strategy with several individual signatures to the control recipe destination or process instruction.

To make settings for the signature strategy, go to Customizing for Process Management and choose activity Control Recipes/PI Sheets -> Digital Signature -> Signature Strategy.

To execute a digital signature, you must have the following authorizations:

  • In the authorization object for the PI sheet:
The authorization for the actvity Execute digital signature as well as for any activity defined in the process instruction
  • In the authorization object for the digital signature:
The authorization for the authorization group of the relevant individual signature if you use signature strategies
When executing a signature, you can also enter a comment. Entering a comment is mandatory for signatures that are used to accept invalid input values.