topic Re: Authorization Object - Checks in Application Development and Automation Discussions

Authorization Object - Checks

Former Member — Fri, 16 Apr 2010 10:27:36 GMT

Hello Experts,

We make use of Authority checks in our applications which require User authorization .

For example Sales application makes use of Standard authorization object 'V_VBAK_VKO' .

AUTHORITY-CHECK OBJECT 'V_VBAK_VKO'

ID 'VKORG' FIELD VBAK-VKORG

ID 'VTWEG' FIELD VBAK-VTWEG

ID 'SPART' FIELD VBAK-SPART

ID 'ACTVT' FIELD DA_ACTVT.

The above check is a combination of Business fields like Sales org(VBAK-VKORG) etc and Type of a Activity (DA_ACTVT)

for example '01' for create and '02' for change .

My requirement is to have pure activity based check .

Can we use the same check without Business fields and have only the Activity type . for example

AUTHORITY-CHECK OBJECT 'ZOBJ'

ID 'ACTVT' FIELD '02'.

Syntactically seems to correct .

Is this a correct usage ?

Thanks and Regards,

Ravish.

Re: Authorization Object - Checks

Former Member — Fri, 16 Apr 2010 10:31:02 GMT

Hi,

Ya u can do do, but its not a good option atleast one field u should maintain in Authorization check.

e.g.


AUTHORITY-CHECK OBJECT 'ZOBJ'
ID 'VKORG' FIELD wa_VBAK-VKORG
ID 'ACTVT' FIELD '02'.

But there is no harm w/o field also u can create.

Regards

Arbind

Re: Authorization Object - Checks

Former Member — Fri, 16 Apr 2010 10:35:56 GMT

Thanks Arbind for the Inputs ,

The reason for this requirement is to avoid Users from Viewing certains Tabs in an application which they are not authorized to , this kind of requirement is not dependent on any Business fields .

Re: Authorization Object - Checks

Former Member — Fri, 16 Apr 2010 10:42:03 GMT

Hi,

Than no need you can go forward.

Kindly close the thread, if the issue is solved.

Regards

Arbind

Re: Authorization Object - Checks

ThomasZloch — Fri, 16 Apr 2010 10:45:16 GMT

I suggest you check both the standard authorization object for the relevant organizational criteria and additionally your custom authorization object in your application.

Make sure that the user roles are maintained accordingly.

Thomas

Re: Authorization Object - Checks

SuhaSaha — Fri, 16 Apr 2010 10:45:19 GMT


> The reason for this requirement is to avoid Users from Viewing certains Tabs in an application which they are not authorized to , this kind of requirement is not dependent on any Business fields .

If you say "certain tabs" then i assume the check is dependent on the tab you are trying to access