topic Re: Authority Check in Application Development and Automation Discussions

Authority Check

Former Member — Tue, 23 Mar 2010 14:15:26 GMT

Hi All,

I want to restrict a program eg., ztest, to only specific users(one or 2 users) . Do we need to pass userid in authority check or do we need create a new role and assign the role to users. I want to restict both display as well as change of the program.

Best Regards

Re: Authority Check

Former Member — Tue, 23 Mar 2010 14:21:19 GMT

Hi,

You need to create a new Authorization object and assign it a role. Then assign the role to the users you need to give access.

Refer to this link which has the details about authorization object and how to use it -

[Authority Check statement in ABAP|http://www.divulgesap.com/blog.php?p=NTU=]

Hope it helps.

Cheers,

Ravi

Re: Authority Check

ThomasZloch — Tue, 23 Mar 2010 23:00:46 GMT

Since your check is on program level (no organizational criteria), existing authorization objects S_PROGRAM (execution) or S_DEVELOP (display/chance source code) plus adequately maintained and assigned user roles should be sufficient.

Thomas

Re: Authority Check

Former Member — Thu, 25 Mar 2010 14:05:54 GMT

Its not the program display/change but the report dispay. ie., If I want to update a table using ztest program then when other users runs the report it should give no authorization message. Only restircted users can run the report.

I belive S_DEVELOP is for giving access for program changes.

Regards

Re: Authority Check

ThomasZloch — Thu, 25 Mar 2010 14:14:48 GMT

Right, so S_PROGRAM seems to be what you need here, by assigning authorization groups in the program attributes and building these groups into roles that you assign to the respective users. Have a little search for S_PROGRAM, you'll find plenty of information.

For access to certain tables you could also look at S_TABU_DIS.

Thomas

Re: Authority Check

Former Member — Fri, 26 Mar 2010 06:22:53 GMT

Hi mariosuresh ,

You need to have an authorization group.

Once you know the authorization group you can assign it by going to se38 .select attributes checkbox.

In that you can assign authorization group .Here if you click on the F4 help it will provide you with the list of available authorization groups .

OR ELSE

Other option is we can do a source code search inside this program and look for "AUTHORITY-CHECK" statements (which are directly called inside the main program, and its includes).

Hope this helps you.

Regards ,

Navya.

Edited by: navya_4321 on Mar 26, 2010 7:33 AM