topic Re: Restrict Authorization by profile in Application Development and Automation Discussions

Restrict Authorization by profile

Former Member — Thu, 21 Aug 2008 04:35:33 GMT

Hi Friends,

This might be a trivial question but i am cripplied with limited access in my box to do trial and error hence asking you.

There is a profile already in use in PRD.

i am now developing a Report assigning a Tcode to the report and want to restrict it for that profile alone.

So adding this Tcode in that profile will suffice ?

Do i have to code


Authority-Check Object OBJ
                         ID Name1
                         Field f1.

and check sy-subrc ?

or both?

Any guidence is highly appreciated.

Regards,

Simha

Re: Restrict Authorization by profile

Former Member — Thu, 21 Aug 2008 04:37:55 GMT

adding the Tcode in your profile may solve your problem

~regards

hitesh

Re: Restrict Authorization by profile

kiran_k8 — Thu, 21 Aug 2008 04:39:29 GMT

Simha,

AUTHORITY-CHECK OBJECT 'ZPLNT'

ID 'WERKS' FIELD P_WERKS.

IF SY-SUBRC NE 0.

message 'Not Authorised' type 'E'.

endif.

K.Kiran.

Re: Restrict Authorization by profile

Former Member — Thu, 21 Aug 2008 04:45:46 GMT

Hi Hitesh,

So adding the Tcode in that profile will restrict other users from accessing it, am i right?

Can you confirm.

Regards,

Simha

Re: Restrict Authorization by profile

Former Member — Thu, 21 Aug 2008 04:46:45 GMT

Hi Kiran,

Can you pls be more specific as to what you meant?

Do i have to create an Authorization object ?

Regards,

Simha

Re: Restrict Authorization by profile

kiran_k8 — Thu, 21 Aug 2008 04:51:51 GMT

Simha,

The given code restricts the User based on the profiles added in that particular Authorisation object.Authorisation Object will be created by the Basis team.

For more on this you can search in SDN using the key word "Authorisation Object".

K.Kiran.