topic Re: BAPI for transaction authority check in Application Development and Automation Discussions

BAPI for transaction authority check

Former Member — Thu, 20 Aug 2009 17:39:23 GMT

Hi,

Is there a BAPI version of AUTHORITY_CHECK_TCODE? I have written an application which calls BAPI_ACC_GL_POSTING_POST but this permits posting even if user has no authorization to the transaction.

It also permits posting to a company code the user has no access to post in SAP.

Thanks.

Re: BAPI for transaction authority check

former_member194669 — Thu, 20 Aug 2009 17:57:44 GMT

I didn't find any bapi for authority check tcode.

roundway will be

write a wrapper rfc and inside this rfc first call authority check fm then call your bapi .

and call this rfc from your apps.

a®

Re: BAPI for transaction authority check

mvoros — Thu, 20 Aug 2009 22:42:28 GMT

Hi,

I was surprised by your statement that it does not check authorizations because BAPIs usually perform authority checks. Not for transaction codes (object S_TCODE) because that does not make sense. But all other objects are usually checked. I checked code for that BAPI and it really looks like there are no authorization checks. Weird. I found also some other discussion on this forum regarding this problem. So it looks like you have to write your own authorization checks. So you can write a wrapper around BAPI_ACC_GL_POSTING_POST where you will check all required authorization objects at the beginning.

Cheers

Re: BAPI for transaction authority check

Former Member — Fri, 21 Aug 2009 03:59:36 GMT

hi ,

you can refer to the below thread , i hope this thread will help you out

-Thanks & Regards

Saurabh Goel