topic Re: Authorization Issue in Application Development and Automation Discussions

Authorization Issue

Former Member — Wed, 29 Apr 2009 07:25:57 GMT

Hi Freinds,

We have a report created in report painter 'FSI0' (Standard Tcode). We want to restrict the user authorization for this report in 'FSI0' on the company code authorization object. We are using 'F_BKPF_BUK' object in the role creation with company code.

The problem is that this role restricts the user on the object 'F_BKPF_BUK' for a particular company code, but there are other roles which are attached to the user giving access to other company codes. Hence the role gets bypassed.

We cannot remove other roles due to bussiness compulsion. Is there any other way we can restrict the user.

Thnks.

Re: Authorization Issue

jurjen_heeck — Wed, 29 Apr 2009 07:48:35 GMT

> We cannot remove other roles due to bussiness compulsion. Is there any other way we can restrict the user.

SAP security is about allowing, not restricting. I guess you'd need to build an extra authority-check into your report which checks an additional (bespoke) object that isn't used by other programs.

Also, the fact that the user is obviously allowed to view other company codes makes me wonder why this restriction should be tighter for a specific report.....

Re: Authorization Issue

Former Member — Wed, 27 May 2009 07:13:14 GMT

This message was moderated.