topic su24 in Application Development and Automation Discussions

su24

Former Member — Tue, 21 Oct 2008 09:56:31 GMT

in su24 when i click check indicator

under check idicator

we have

c and cm

what does this mean

Re: su24

Former Member — Tue, 21 Oct 2008 10:03:39 GMT

Hi Sagar,

The check indicators in the SU24 actually give the inputs necessary for the SAP system to interpret the AUTHORITY-CHECK.

CM = Authorization checks are performed (if coded in the program) AND the authorization object is added in PFCG when the tcode is added to the role menu.

C = Authorization checks are performed (if coded in the program) but the authorization object is NOT added in PFCG when the tcode is added to the role menu.

Thanks,

Saby..

Re: su24

Former Member — Tue, 21 Oct 2008 10:36:55 GMT

Hi Sagar,

As you can imagine, this has been asked and answered several times before.

For stuff like this, please search the forum and help.sap.com and the F1 help (in the system itself) before opening a new thread.

This helps us keep the search functionality usefull

Cheers,

Julius

Re: su24

Former Member — Tue, 21 Oct 2008 10:36:58 GMT

This message was moderated.

Re: su24

Former Member — Tue, 21 Oct 2008 10:38:08 GMT

Hello

in se93 i have checked for su01 the program used is SAPMSUU0 .

how do i check what all are coded in the program .

under c there are many object selected in su24 . are these objects are checked in su01???

Re: su24

Former Member — Tue, 21 Oct 2008 10:42:38 GMT

Hi Sagar,

Go to SE38

Give the program name

Select the source code and display.

Within the source code, find Authority-check and in there u can chk the auth.objects and the field if any defined.

The objects that are maintained in SU24 as C will not be checked unless it has been hard coded in the program under Authority-check.

Thanks,

Saby..

Re: su24

Former Member — Tue, 21 Oct 2008 10:51:56 GMT

> The objects that are maintained in SU24 as C will not be checked unless it has been hard coded in the program under Authority-check.

Though there are a few exceptions to that rule as well, like:

- S_TCODE

- S_PROGRAM

- S_DATASET

- S_C_FUNCT

- etc.

You won't see them in the coding, but they are there.

Cheers,

Julius

Re: su24

jurjen_heeck — Tue, 21 Oct 2008 11:04:32 GMT

And what about the possible object linked to a transaction in SE93......

That one isn't in the code either.

Besides that, just searching in the source code will not automatically display all includes and function modules etc. The list of AUTHORITY-CHECK statements from the main program will hardly ever be complete.

Tracing the actual program while it runs will give you far better information.

Re: su24

Former Member — Tue, 21 Oct 2008 11:09:19 GMT

That's also true.

Another one is if the checks are in a function module which only makes these checks when the program actually runs and calls the function module.

Yet another, is that in some cases the authority-check statement is coded in a different program which is in a different system... those ones are hard to trace as well..

Cheers,

Julius