topic Re: Auth Objects pulled in Application Development and Automation Discussions

Auth Objects pulled

Former Member — Fri, 21 May 2010 04:22:10 GMT

Hi Friends ,

When i created a role for transaction F-02 in system, I observed in Auth data (Inside PFCG) that default auth objects comes from SU24 for F-02 tcode . Besides this some other auth object also pulled with empty values .

(As per my understanding , Generally for any role ceation for particular transaction , Default auth object pulled from SU24 in auth data )

But in this case , Some other Auth object also pulled with empty values .I have researched on it and found that "Default values for transaction "FB01" in SE93 for F-02 . I have seen in SU24 for FB01 then observed that other auth objects pulled for F-02 from FB01 .

My doubt :

1) "Default values for transaction " SE93?

2) Do Generally Auth objects pulled from both transaction (F-02 , FB01)? If i am creating role only from F-02 .

Please suggest .

regards

Vikas rana

Re: Auth Objects pulled

Former Member — Fri, 21 May 2010 04:29:35 GMT

> 1) "Default values for transaction " SE93?

Do you mean deafult auth objects for accessing SE93. If yes, Please check su24 values for transaction SE93. It is S_DEVEOP object

> 2) Do Generally Auth objects pulled from both transaction (F-02 , FB01)? If i am creating role only from F-02 .

Yes If a transaction calls another transaction then SU24 values of second transaction(FB01) are also pulled in. This is ensure you do not get any auth errors while accessing 1st transaction(F-02).

If you want to check for the Auth objects being checked in a transaction or report, please use program RSABAPSC.

Thanks.

Anjan

Re: Auth Objects pulled

Former Member — Fri, 21 May 2010 04:41:08 GMT

Hi Vikas,

1) "Default values for transaction " SE93?

F-02 and FB01 are coupling transaction refer to table TCDCOUPLES and enter F-02 and execute, in addition to it below TCodes are called as well:

F-29

FB02

SE38

SE51

SE80

So whenever you run/execute F-02 it does call internally all the above tcodes at some stage.

2) Do Generally Auth objects pulled from both transaction (F-02 , FB01)? If i am creating role only from F-02 .

Now make a check if the PFCG auth tab is pulling all the object which are assosiated with above couples Tcodes as well??

Re: Auth Objects pulled

Former Member — Fri, 21 May 2010 05:16:18 GMT

Thanks Anjan and Akshay for reply ,

Akshay ,

1) As per you , whatever the auth objects in su24 for all Coupled transactions for tcode F-02 (In this case F-29, FB02, SE38, SE51, SE80) Would be pulled out ,If i am creating ROle for F-02 ).

But I have checked in system , Auth objects not pulled for all coupled tcodes .

Rather , I think as per Anjan only Auth objects for tcode : FB02 pulled (and Auth objects also for F-02) when I am creating role for F-02 .

In short ,only F-02 and FB02 auth objects comes in PFCG , when i am creating role for F-02 .

(I hope ,I am not confusing you all , Please suggest)

2) Please clarifiy , Whats the meaning of "Default values for transaction " in SE93.

Regards

Vikas rana

Re: Auth Objects pulled

Former Member — Fri, 21 May 2010 05:29:09 GMT

Hi Vikas

There are many transaction(e.g. ZTABLE) for table updates which call trxn SM30. So by default when you add transaction ZTABLE to your role, by default SU24 values for transaction SM30 are pulled in.

These transactions are created with the option "Transaction with Parameter ( parameter transaction)"

When you go F-02 through transaction SE93 , beside "Screen" there is a number diaplyed also there is some value maintained for " From Mudule pool" . "Default values for transaction" pulls values for these fields from teh called transaction(i.e. FB02 in this case).

Hope it clarifies.

Thanks.

Anjan

Edited by: anjanpandey on May 21, 2010 7:29 AM

Re: Auth Objects pulled

Former Member — Fri, 21 May 2010 05:45:25 GMT

Hi Vikas,

Yes you are correct, I just checked in the sandbox and found that f-02 is a parameter transaction which is used to assign default values to the screen of FB01.

If you have access to both the tcodes then execute it and find the different between the two tcodes Fb01 and F-02.Also refer to below help link for more details on parameter tcodes:

http://help.sap.com/saphelp_nwmobile71/helpdata/EN/43/0f955bc2086ff3e10000000a422035/content.htm

If you execute Tcode F-02 you will find that below are the defaut values which comes in the initial screen:

type SA

Pstky 40

You can see the same values maintained in SE93 for this tcode. hope this clarifies your doubt.

Re: Auth Objects pulled

Former Member — Fri, 21 May 2010 09:36:37 GMT

Hi Guys ,

S o Ultimately discussion is all coupled transactions hits auth object not pulled when we are creating role for particular tcode.

Only parameter transactions linked auth object pulled while we are creating role ?

Yes ?

Please clarifiy.

Re: Auth Objects pulled

Former Member — Fri, 21 May 2010 09:40:07 GMT

> S o Ultimately discussion is all coupled transactions hits auth object not pulled when we are creating role for particular tcode.

> Only parameter transactions linked auth object pulled while we are creating role ?

Agreed. Let us know if there are any further questions.

Thanks.

Anjan

Edited by: anjanpandey on May 21, 2010 11:40 AM