topic Re: create authorization check for a report in Application Development and Automation Discussions

create authorization check for a report

Former Member — Wed, 18 Feb 2009 15:02:15 GMT

Hi,

I need to create an authorization check for a report. It means that I need to restrict the usage of the report to couple of users ( 'USER1' and 'USER2' ). How can I do that? I did read through a lot of threads regarding this piece got a bit confused and stuck while creating the authorization object.

Say the report name is ZHR_TIMEABC.

Can anyone explain how to create an authorization object and how are they tied to the object and call them in the abap code?

Thanks in advance,

Re: create authorization check for a report

Former Member — Wed, 18 Feb 2009 15:05:34 GMT

Hi,

Refer to the link.

http://help.sap.com/saphelp_nw04s/helpdata/en/44/353d4bbae848a1e10000000a114a6b/frameset.htm

Regards

Rajesh Kumar

Re: create authorization check for a report

Former Member — Wed, 18 Feb 2009 15:06:22 GMT

Check whether this is useful

You can have the authorisation for the particular program and check against this code below for the object S_C_FUNCT

AUTHORITY-CHECK OBJECT 'S_C_FUNCT'

ID 'PROGRAM'

FIELD sy-repid

ID 'ACTVT'

FIELD '16'

ID 'CFUNCNAME'

FIELD 'SYSTEM'.

Re: create authorization check for a report

Former Member — Wed, 18 Feb 2009 15:31:02 GMT

Hi,

Thanks for the response. The link did not help me. From the threads, I read that we use transactions SU20, SU21 to create authorization objects and assign them to a group and then use the object in the abap code. It looks like the link gives a different info.

Correct me if I am wrong, I am new to this topic.

Thanks,

Re: create authorization check for a report

former_member156446 — Wed, 18 Feb 2009 15:34:25 GMT

S_C_FUNCT C calls in ABAP programs is the authorization object for programs

Re: create authorization check for a report

Former Member — Wed, 18 Feb 2009 15:40:12 GMT

Hi,

Does this mean that I need not create any obijects using SU20 or 21 and just call this function in the program for authorization check?

Re: create authorization check for a report

former_member191735 — Wed, 18 Feb 2009 15:45:16 GMT

No, you dont have to create any authorization. Just use that as it is

Re: create authorization check for a report

former_member156446 — Wed, 18 Feb 2009 15:45:56 GMT

JUST CALL

Re: create authorization check for a report

Former Member — Wed, 18 Feb 2009 16:16:59 GMT

Hi,

Thanks. Here is my understanding, S_C_FUNCT calls a system generated function module to make an authority check. So, if different users say USER1 and USER2 have different authroization levels, defined in their user profile, just adding this piece code will take care of authroization check for the program OR do I need to take care of something else?

If so, when do we need to create the authorization objects using SU20 and assign the group and follo this process? When do we use this approach ( lot of threads on authority check have mentioned this procedure)?

Your inputs will be helpful to understand this concept.

Thanks,

Re: create authorization check for a report

former_member156446 — Wed, 18 Feb 2009 16:22:20 GMT

[SAP HELP|http://help.sap.com/saphelp_40b/helpdata/es/34/55cada98482bc0e10000009b38f91f/content.htm]

Re: create authorization check for a report

Former Member — Wed, 18 Feb 2009 17:05:51 GMT

Hi,

Thanks. I got the info. In that case when do you create custom authorization objects and assign the group to it?

Re: create authorization check for a report

former_member156446 — Wed, 18 Feb 2009 17:47:13 GMT

for some data elements for which you donnot have a SAP standard Object... maybe a zfield...etc..

Re: create authorization check for a report

Former Member — Wed, 18 Feb 2009 17:59:22 GMT

Thanks for your continued help. In that case, if I understand this right, if we need to do authorization check for some custom tables or custom data fields you need to create custom authorization objects and proceed however for reports or interfaces using the S_C_FUNCT will handle the authority check and should be enough.

In that case, even for my custom report I do not have to create custom authorization objects the standard S_C_FUNCT object should be enough. Right?

Thanks again,

Re: create authorization check for a report

former_member156446 — Wed, 18 Feb 2009 18:03:33 GMT

authority check is data element specific... dont think too much, just remember it.. hit F1 on authority check for more and more info J@Y

Re: create authorization check for a report

Former Member — Wed, 18 Feb 2009 18:24:43 GMT

Thanks.