topic Re: AUTHORIZATION OBJECT PROBLEM in Application Development and Automation Discussions

AUTHORIZATION OBJECT PROBLEM

Former Member — Tue, 23 Jun 2009 11:36:51 GMT

Hi,

I had added a Authorization Object on basis of Plant in my report and it is giving the problem that instead of displaying the Plant it is displaying as IEQPlant 1. i had taken plant as a selection screen instead of parameter.

Please tell provide me guidelines how to display the Plant name only instead of IEQPlant Name.

AUTHORITY-CHECK OBJECT 'ZPLANT1'

ID 'WERKS' FIELD P_WERKS.

IF SY-SUBRC <> 0.

MESSAGE E045(ZMSG) WITH P_WERKS.

ENDIF.

Re: AUTHORIZATION OBJECT PROBLEM

jaideepsharma — Tue, 23 Jun 2009 11:39:19 GMT

Hi,

If its the message you are talking about then instead of P_WERKS use P_WERKS-LOW.

KR Jaideep,

Re: AUTHORIZATION OBJECT PROBLEM

Former Member — Tue, 23 Jun 2009 11:40:12 GMT

Hi,

Incase of select options you will have to first fetch all the plants from T001W which the user has put in the select option into an internal table.

This is because user can enter multiple plants.

For a select option you cannot jut compare the low and high values because select-options can have complex selections.

Then LOOP on this internal table and for each value check the authority object and then give the error message accordingly for the incorret plant.

Thats the way how you should do it.

Regards,

Ankur Parab

Edited by: Ankur Parab on Jun 23, 2009 5:10 PM

Re: AUTHORIZATION OBJECT PROBLEM

jaideepsharma — Tue, 23 Jun 2009 11:42:21 GMT

Hi,

Please see the sample code below that I used to have the same functionality in one of my programs.

*---Authorization for Company code entered by the users.
*---This code will restrict users to see data for company
*---codes which they are not authorized to.
*---Select all the company codes based upon selection entered by the
*---user
DATA: li_bukrs TYPE TABLE OF bukrs,
       lwa_bukrs TYPE bukrs,
       lv_flag TYPE c.


 SELECT bukrs
   FROM t001
   INTO TABLE li_bukrs
  WHERE bukrs IN bukrs.
 IF sy-subrc EQ 0.
*---Clear Screen variable for Company code
   CLEAR bukrs.
   REFRESH bukrs.
*---Filter and prepare Select options for Company code table to be
*---passed to query. Table will only have values of company codes he is
*---authorized to for display.
   LOOP AT li_bukrs INTO lwa_bukrs.
     AUTHORITY-CHECK OBJECT 'F_BKPF_BUK'
                       ID 'BUKRS' FIELD lwa_bukrs
                       ID 'ACTVT' FIELD '03'.
     IF sy-subrc = 0.
       bukrs-sign = 'I'.
       bukrs-option = 'EQ'.
       bukrs-low = lwa_bukrs.
       bukrs-high = space.
       APPEND bukrs.
     ELSE.
       lv_flag = 'X'.
     ENDIF.
   ENDLOOP.
*---Give warning message to the user in case he is not authorized to see
*---data for all the company codes that he has entered.
   IF lv_flag = 'X'.
     MESSAGE ID 'ZF_MSS_FNG' TYPE 'W' NUMBER '015'.
   ENDIF.
 ENDIF.

KR Jaideep,

Re: AUTHORIZATION OBJECT PROBLEM

Former Member — Tue, 23 Jun 2009 11:43:04 GMT

hi,

yes,i had checked in the debuug mode it is storing the data Plant Name in LOW and there is a field called OPTION and SIGN i.e. I and EQ . It is coming as IEQDACF.

Please provide me guidelines how to solve this problem as i want to hav only DACF.

Re: AUTHORIZATION OBJECT PROBLEM

Former Member — Tue, 23 Jun 2009 11:45:42 GMT


AUTHORITY-CHECK OBJECT 'ZPLANT1'
ID 'WERKS' FIELD P_WERKS.
IF SY-SUBRC <> 0.
MESSAGE E045(ZMSG) WITH P_WERKS-LOW. "<<<<<<<<.
ENDIF.

Re: AUTHORIZATION OBJECT PROBLEM

GauthamV — Tue, 23 Jun 2009 11:48:51 GMT

Use this logic instead of directly passing the values.



  SELECT-OPTIONS:  S_WERKS FOR PA0001-WERKS , "Personnel Area
                   S_BTRTL FOR PA0001-BTRTL , "Personnel Subarea
                   S_PERSG FOR PA0001-PERSG , "Employee Group
                   S_PERSK FOR PA0001-PERSK . "Employee Subgroup

  DATA: h_werks LIKE t500p OCCURS 0 WITH HEADER LINE ,
            h_funkt LIKE t591a OCCURS 0 WITH HEADER LINE .

AT SELECTION-SCREEN.
  
  REFRESH :h_werks[] , h_funkt .
  CLEAR :h_werks , h_funkt .
  SELECT * FROM t500p INTO TABLE h_werks WHERE persa IN s_werks .
  SELECT * FROM t591a INTO TABLE h_funkt WHERE infty = '0034' AND subty IN s_funkt.

  LOOP AT h_werks .
    LOOP AT h_funkt .
      AUTHORITY-CHECK OBJECT 'Z_HR_AUTH'
               ID 'PERSA' FIELD h_werks-persa
               ID 'FUNKT' FIELD h_funkt-subty.
      IF sy-subrc NE 0.
        MESSAGE e001(zhrrep) WITH h_werks-persa h_funkt-subty .
      ENDIF.
    ENDLOOP.
  ENDLOOP.

Re: AUTHORIZATION OBJECT PROBLEM

Former Member — Tue, 23 Jun 2009 11:50:10 GMT

TRY Like this..........

AUTHORITY-CHECK OBJECT 'ZPLANT1'

ID 'WERKS' FIELD P_WERKS

IF SY-SUBRC eq 0.

MESSAGE E005(zmsg) WITH P_WERKS-LOW.

ENDIF.

Hope it helps you......

Re: AUTHORIZATION OBJECT PROBLEM

Former Member — Tue, 23 Jun 2009 11:56:22 GMT

HI,

I had tried as you had said and it is working fine but if a user specify the range of plant near 5 or 6 ,does it going to create a problem or not?

Re: AUTHORIZATION OBJECT PROBLEM

Former Member — Tue, 23 Jun 2009 12:00:39 GMT

Then.. follow what Gutham said...

Re: AUTHORIZATION OBJECT PROBLEM

Former Member — Tue, 23 Jun 2009 12:02:33 GMT

Hi,

I had tried as you had said and it is working fine but if a user specify the range of plant near 5 or 6 ,it is displaying the low value only not the high ..

AUTHORITY-CHECK OBJECT 'ZPLANT1'

ID 'WERKS' FIELD P_WERKS

IF SY-SUBRC eq 0.

MESSAGE E005(zmsg) WITH P_WERKS-LOW.

ENDIF.

if i remove the low from p_werks it is again defining it as a IBTMMCODACF.

Please provide me guidelines as i am able to display it as MMCODACF.

Re: AUTHORIZATION OBJECT PROBLEM

Former Member — Tue, 23 Jun 2009 12:03:11 GMT

TRY SOMETHING LIKE FOLLOWING

data lv_werks
Select WERKS FROM T001W INTO LV_WERKS
      WHERE WERKS IN P_WERKS.
     AUTHORITY-CHECK OBJECT 'ZPLANT1'
                         ID 'WERKS' FIELD LV_WERKS.
      IF SY-SUBRC <> 0.
             MESSAGE E045(ZMSG) WITH LV_WERKS.
       ENDIF.
ENDSELECT.

Re: AUTHORIZATION OBJECT PROBLEM

Former Member — Tue, 23 Jun 2009 12:06:59 GMT


DATA : BEGIN OF itab OCCURS 0,
        werks TYPE werks_d,
       END OF itab.

SELECT werks INTO TABLE itab FROM <table>
       WHERE werks IN p_werks.

  LOOP AT itab.
    AUTHORITY-CHECK OBJECT 'ZPLANT1'
    ID 'WERKS' FIELD itab-werks.
    IF sy-subrc EQ 0.
      MESSAGE e005(zmsg) WITH itab-werks.
    ENDIF.
  ENDLOOP.

Re: AUTHORIZATION OBJECT PROBLEM

Former Member — Tue, 23 Jun 2009 12:15:16 GMT

Hi,

I had tried as you had said but it is not working.Please provide me guidelines to solve this problem.

Re: AUTHORIZATION OBJECT PROBLEM

Former Member — Tue, 23 Jun 2009 12:19:39 GMT

POST YOUR CODE

Re: AUTHORIZATION OBJECT PROBLEM

Former Member — Tue, 23 Jun 2009 12:21:30 GMT

hi,

i am displaying the code which i am using in the report.

SELECTION-SCREEN BEGIN OF BLOCK PAR1 WITH FRAME TITLE TEXT-001.

*PARAMETERS: P_WERKS LIKE ZPR_DET-WERKS.

SELECT-OPTIONS: P_WERKS FOR ZPR_DET-WERKS,

BUDAT FOR ZPR_DET-BUDAT,

VERAN FOR CRHD-VERAN,

KTSCH FOR ZPR_DET-KTSCH.

SELECTION-SCREEN END OF BLOCK PAR1.

AUTHORITY-CHECK OBJECT 'ZPLANT1'

ID 'WERKS' FIELD P_WERKS.

IF SY-SUBRC <> 0.

MESSAGE E045(ZMSG) WITH P_WERKS."-LOW P_WERKS-HIGH.

ENDIF.

Re: AUTHORIZATION OBJECT PROBLEM

Former Member — Tue, 23 Jun 2009 12:25:14 GMT

Seems you dint check later post... please do changes according to that and come back to us in case any problem..

Thanks

Re: AUTHORIZATION OBJECT PROBLEM

Former Member — Tue, 23 Jun 2009 12:25:52 GMT

Hi,

Ankur Parab, Jaideep Sharma, Gautham Vangaveti, GTREN and Perez C (second attempt) have all given you the solution.

If you follow their code the program will work.

Regards,

Nick

Re: AUTHORIZATION OBJECT PROBLEM

Former Member — Tue, 23 Jun 2009 12:29:32 GMT

hi,

The following code:-

I am passing the value to the i.e. range 1 to 6. i checked in the debug mode it is giving the problem that

it storing the lot of values .



DATA : BEGIN OF itab1 OCCURS 0,
        werks TYPE werks_d,
       END OF itab1.

SELECT werks INTO TABLE itab1 FROM ZPR_DET
       WHERE werks IN p_werks.

  LOOP AT itab1.
    AUTHORITY-CHECK OBJECT 'ZPLANT1'
    ID 'WERKS' FIELD itab1-werks.
    IF sy-subrc EQ 0.
      MESSAGE e005(zmsg) WITH itab1-werks.
    ENDIF.
  ENDLOOP.

Edited by: ricx .s on Jun 23, 2009 2:30 PM

Re: AUTHORIZATION OBJECT PROBLEM

Former Member — Tue, 23 Jun 2009 12:33:46 GMT

Follow this:

Data: begin of i_werks occurs 0,

werks like t001w-werks,

End of i_werks.

SELECTION-SCREEN BEGIN OF BLOCK PAR1 WITH FRAME TITLE TEXT-001.

*PARAMETERS: P_WERKS LIKE ZPR_DET-WERKS.

SELECT-OPTIONS: P_WERKS FOR ZPR_DET-WERKS,

BUDAT FOR ZPR_DET-BUDAT,

VERAN FOR CRHD-VERAN,

KTSCH FOR ZPR_DET-KTSCH.

SELECTION-SCREEN END OF BLOCK PAR1.

Select werks into i_werks from t001w where werks IN P_WERKS.

Loop at i_werks.

AUTHORITY-CHECK OBJECT 'ZPLANT1'

ID 'WERKS' FIELD I_WERKS-WERKS.

IF SY-SUBRC NE 0.

MESSAGE E045(ZMSG) WITH I_WERKS-WERKS.

ENDIF.

Endloop.