topic Re: Authorization Objects in Application Development and Automation Discussions

Authorization Objects

Former Member — Thu, 04 Jun 2009 21:40:36 GMT

How to find Authorization Object for a transaction? I want to Authority Check in a BADI for MRBR?

Thanks,

Re: Authorization Objects

Former Member — Thu, 04 Jun 2009 22:40:34 GMT

Use Transaction code: SU24/SU22. Enter the transacion code and Execute. Is shows all the Authorization Objects available.

You can select the respsective one by looking into its fields, or can create new custom one and assign it to transaction code.

Edited by: 19740_SANTHI on Jun 5, 2009 12:53 AM

Re: Authorization Objects

Former Member — Fri, 05 Jun 2009 04:41:59 GMT

hai ap,

if u want to use authorization object in badi first u search for the badis for transactions and then search the authorization objects for that transaction and then use the authorit-check statement and pass approptiate fields adn value

m.a

Re: Authorization Objects

Former Member — Fri, 05 Jun 2009 15:22:08 GMT

1. I found the BADI and have patch of code.

2. That patch of code is intended for some users only.

3. Planning to create Z authorisation object with field ACTVT and permitted activity 3

4. Use Authority check in badi for field ACTVT value 3.

Questions:

a. Is it right way or I am missing some thing.

b. How is this authorization object assigned to user (where is the value 3 assigned to user). Is it authrization profile?

Re: Authorization Objects

Pawan_Kesari — Fri, 05 Jun 2009 16:21:58 GMT

Authority objects are assigned to roles (using transaction PFCG) and roles in turn are assinged to user.

Re: Authorization Objects

Former Member — Tue, 25 Aug 2009 08:29:47 GMT

Hello AP,

Could you provide me the BADi name and the patch of code.

I have a requirement to restrict authorisation on MRBR based on Business Area or atleast Purchase Organisation. I am not sure how to proceed on this. Currently MRBR is offering authorisation check based on Purchase Group (EKGRP). But it's cross company code object for our case. So we are searching for another option to restrict the authorisations. Business Area is one good option for us based on it's design in our project. Or atleast Purchase Organisation works for us.

Could you please provide me the details how you proceed with BADi.

Thanks in advance,

Mallik