topic Re: include an authorization check in program in Application Development and Automation Discussions

include an authorization check in program

Former Member — Wed, 20 Jan 2010 08:38:44 GMT

Hello,

I am new to SDN .

I got a requirement where i have to include an authorization check in programs this is required for all custom programs before they are added to roles . I am not sure what i have to do it .

These programs if i try to open in se38 , i cannot view them .

How do i include authorisation checks .

Please let me know step by step .

i will be grateful.

thanks

sumit

Edited by: sumit123 on Jan 20, 2010 9:52 AM

Re: include an authorization check in program

kesavadas_thekkillath — Wed, 20 Jan 2010 08:57:08 GMT

Please search in SCN.

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 08:59:39 GMT

i have already searched in sdn , but cannot find answer fulfilling my specific requirement .

plzzzzzz help if you know

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 08:59:46 GMT

Hi Sumit,

It's quiet strange that you don't see custom reports through SE38, I am not sure what this issue is, But you can go to T-CODE SE80, Then select program from the drilldown button and enter your report name, Then see what it says.

Regarding Authorization object in ABAP reports, Please follw the below sample code for help.


REPORT demo_authorithy_check.

PARAMETERS pa_carr LIKE sflight-carrid.
DATA wa_flights LIKE demo_focc.

AT SELECTION-SCREEN.

  AUTHORITY-CHECK OBJECT 'S_CARRID'
                  ID 'CARRID' FIELD pa_carr
                  ID 'ACTVT' FIELD '03'.

  IF sy-subrc = 4.
    MESSAGE e045(sabapdocu) WITH pa_carr.
  ELSEIF sy-subrc <> 0.
    MESSAGE e184(sabapdocu) WITH text-010.
  ENDIF.

Thanks

Saurabh

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 09:01:42 GMT

Hi,

when i go to se80 and write my program it says it does not exist .

what do i do .

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 09:02:27 GMT

Hi Sumit,

http://help.sap.com/saphelp_nw04s/helpdata/en/52/67129f439b11d1896f0000e8322d00/content.htm

Check this link.

The following actions are authorization checks that are performed before the start of a program or table maintenance and which the SAP applications cannot avoid: .

1.Starting SAP transactions (authorization object S_TCODE)

2.Starting reports (authorization object S_PROGRAM)

3.Calling RFC function modules (authorization object S_RFC)

4.Table maintenance with generic tools (S_TABU_DIS)

Authority check is done to restrict the execution of a report to certain users.

Basis creates a authorisation group , includes certain roles in it, to which authorisation should be given.

If one's id has that role then he is authorised to execute the report..

IN the report the below code is written to do auth. check

Authority check on plant

AUTHORITY-CHECK OBJECT 'ZMMD_PROD'

ID 'WERKS' FIELD wf_werks.

Here authorisation is done on plant. and the authorisation object is ZMMD_PROD(to be created by BASIS)

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 09:06:04 GMT

thanks kumar,

so do i have to perform the 1st four steps that u have said .

how do i do them , can u explain step by step like what t-code to use etc,

sumit

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 09:07:04 GMT

Hi Sumit,

It clearly states that reports that you are looking in SAP system doesnot exsist, First create those reports then do Authorization object coding in those reports.

When ever you create any report in SAP system it's entry gets updated in table "TADIR", JUst go to SE11 and enter"TADIR" table name there go to the contents and enter your report name in field "OBJ_NAME", IF it doen't shows any thing then your report doesn't exsist in SAP system,

Thanks

Saurabh

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 09:09:35 GMT

Hi Sumit,

Those 4 steps are required afterwards, Your issue at this stage is to find your custom reports which you are not been able to find.

Thanks

Saurabh

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 09:09:37 GMT

hi saurab,

i checked in TADIR and the program exists , now how do i include the authorisation checks .

thanks for helping me out so far

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 09:11:52 GMT

Hello Sumit,

Ask the basis Guys...They can get you rid of this.

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 09:13:20 GMT

Hi Sumit,

If it exsist in "TADIR" then check for what value is there in the databse for "OBJECT" field corresponding to your report, this will help you to find out that what kind of report is this. then we can work upon authorization object.

Thanks

Saurabh

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 09:16:04 GMT

object type is TRAN

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 09:22:24 GMT

Hi Sumit,

Then It's a Transaction code not a report, If you want to find the Custom report attached to this T-CODE then go to TCODE se93 and enter your "TCODE" then press display it will give your report name attached to that transaction,

Then follow the code that i mentioned previously to add authorization code.

Thanks

saurabh

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 09:27:10 GMT

thanks a lot saurabh,

now do i follow the

REPORT demo_authorithy_check.
 
PARAMETERS pa_carr LIKE sflight-carrid.
DATA wa_flights LIKE demo_focc.
 
AT SELECTION-SCREEN.
 
  AUTHORITY-CHECK OBJECT 'S_CARRID'
                  ID 'CARRID' FIELD pa_carr
                  ID 'ACTVT' FIELD '03'.
 
  IF sy-subrc = 4.
    MESSAGE e045(sabapdocu) WITH pa_carr.
  ELSEIF sy-subrc  0.
    MESSAGE e184(sabapdocu) WITH text-010.
  ENDIF.

i do not need to make any chnages in the sample code.

i am the beginner , where do i need to add these codes

sorry if i ask basic questions

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 09:33:29 GMT

Below AT SELECTION SCREEN EVENT....

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 09:36:38 GMT

hi kumar,

i am in SE93 and i cannot see any selection screen event

plz help

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 09:41:20 GMT

Sumit,

Go to SE93. Enter the T-Code.

Press enter.

You can get the program name.

Double click on that name or else copy paste it and go to SE38.

display

Search the event and work accordingly.

Thanks,

Manas

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 09:47:36 GMT

Hi Kumar,

i really aprreciate your help..i managed to get the name of the program and now starting to add those codes .

let me see how it works

thanks once again .

i will come back once it is done

sumit

Re: include an authorization check in program

Former Member — Wed, 20 Jan 2010 10:03:06 GMT

hi kumar,

when i write those lines of codes i get error saying " statment not allowed between form routine and selection screen "

what do i do .

plz help

Edited by: sumit123 on Jan 20, 2010 11:22 AM