topic Re: re: authorization object in Application Development and Automation Discussions

re: authorization object

Former Member — Tue, 06 Dec 2005 08:59:16 GMT

Hi,

I have created authorizatin field for authorization object and class. So now how can i add this authorizationh object for a particular user.

rgds

p.kp

Re: re: authorization object

Former Member — Tue, 06 Dec 2005 09:04:24 GMT

Where ever you need to restrict..

by providing the piece of code...

in initalization

authority-check object 'V_VTTK_SHT'

id 'ACTVT' field '02'

id 'SHTYP' dummy.

if sy-subrc <> 0.

message e059(zz).

endif.

Re: re: authorization object

Former Member — Tue, 06 Dec 2005 09:04:43 GMT

Hi paluri,

1. what i understand is that u

want to provide rights to a user

for your authoirsation object.

(not how to use in abap using authority-check)

2. well for that u have to assign

thru roles:

use tcode PFCG.

in that u have to select/enter a role

3. There after u can add a authorisation

object manually and provide

the rights - field wise.

Probably the basis team might help you for this.

regards,

amit m.

Re: re: authorization object

Former Member — Tue, 06 Dec 2005 09:10:22 GMT

for a particular user we have three ways of authorization check:

Authorization

Enter in the user master record or part of an authorization profile. An authorization comprises complete or generic values for the authorization fields in an authorization object. The combination determines the activities with which a user can access certain data.

Maintenance in transaction SU03 or generation from transaction PFCG (profile generator for role maintenance).

Authorization Profile

Grouping of several individual authorizations or further authorization profiles. Can be entered in the user master record instead of individual authorizations. An authorization can be assigned to authorization profiles as often as you wish.

Maintenance in transaction SU02 or generation from transaction PFCG (profile generator for role maintenance).

User Master Record

The existence of a user master record is a prerequisite for logon to an SAP system. The master record determines which actions a user is allowed to execute and which authorizations they are assigned. Default settings, such as the format in which decimal places are displayed in lists, are also stored in the user master record. An authorization profile can be assigned to users as often as you wish.

Maintenance in transaction SU01.

Hope this helps

Regards

Amit

Re: re: authorization object

Former Member — Tue, 06 Dec 2005 09:34:10 GMT

Hi,

amit i added that authorized object into the role and i generated that role. Then other than me able to access that field.

rgds

p.kp

Re: re: authorization object

Former Member — Tue, 06 Dec 2005 09:38:32 GMT

Hi again,

1. well, it depends

to which which users

this Role has been assigned to.

This information is available in the same tcode

PFCG.

Regards,

Amit M.

Re: re: authorization object

Former Member — Tue, 06 Dec 2005 09:54:37 GMT

Hi,

I created authorization object zemp and added the dataelement for that empno. And i added

AUTHORITY-CHECK OBJECT 'ZEMP'

ID 'EMPNO' FIELD A.

IF SY-SUBRC <> 0.

MESSAGE E000(ZEN).

ENDIF.

But for what field values i can restrict the user and how can i add those restricted values to that object.

rgds

p.kp

Re: re: authorization object

Former Member — Tue, 06 Dec 2005 10:06:10 GMT

Hi again,

1. use tcode PFCG

to create/modify role

2. In that there is one tab - AUTHORIZATIONS.

3. In this tab, at below,

there is a Display Button

Click That.

4. A new screen will come.

5. From this screen u can ADD the authorisation object.

6. When adding, it will also ask

the Values of the respective fields,

for which the user needs to be given authorisation.

eg. for field BUKRS, it will ask

1000, 1100, etc.

7 In your program u can restrict the user

only by checking the value of that field.

Authority-check.

eg user has entered 1100 in bUKRS,

and he does not have right for 1100,

sy-subrc <> 0,

check here, and proceed accordingly.

8. u can give warning/error message etc.

9. I still feel, that basis team might help

u with PFCG tcode

(bcos it is their daily routine job)

Hope it helps.

regards,

amit m.