topic Re: User has no authorization for query in Application Development and Automation Discussions

User has no authorization for query

Former Member — Thu, 04 Dec 2008 12:56:56 GMT

Hello,

We have a query that users cannot access, even though the InfoSet for the query is assigned to same authorization group that the user is assigned to, in transaction sq02.

The trace for the user shows that it is missing authorization S_PROGRAM for P_GROUP=CMD(the name of the user aut. group) with S_ACTION=SUBMIT. I find that the user is assigned to the CMD group, so we don't know what is the problem.

Can anyone help?

Thanks,

Re: User has no authorization for query

Former Member — Thu, 04 Dec 2008 13:02:47 GMT

Hi,

Please regenerate/activate the query and then check if it works...

Ideally when you assign the infoset to the user groups, you need to enter the required users who can access the infoset..

Regards

Shiva

Re: User has no authorization for query

Former Member — Thu, 04 Dec 2008 13:14:48 GMT

Regenerating the query didn't help. I noticed that the problem occurs with queries which are assigned to authorization group, and the ones for which the authorization group is None, wotk fine.

Can someone explain to me the difference between authorization group and user group, regarding infosets and queries?

Thanks

Re: User has no authorization for query

Former Member — Thu, 04 Dec 2008 13:20:22 GMT

Hello,

If you are in development system, Try this:

In SQ02: Change InfoSet > Goto Global Properties > Enter in Authorization group

In SQ01: Query > More functions > Generate program

And then run the same query again.

You need to have the authorizations to run the query which have been assigned to the particular authorization group. Get the authorization group added to your role by contacting the SAP security team.

Hope it helps to test the query.

Thanks,

Jayant

Re: User has no authorization for query

Former Member — Thu, 04 Dec 2008 13:25:14 GMT

We were hoping that this could be done without making changes regarding roles, only by assigning the users and infoset to the same user group. But, from what Jayant says, it seems that we can only restrict access using roles, so that is what we will have to do.

Thanks,