topic Re: Authorization object for programs in Application Development and Automation Discussions

Authorization object for programs

Former Member — Thu, 23 Sep 2010 07:07:50 GMT

Hi Experts,

We have authorization object S_TCODE for restriction of t-codes. Similarly, is there any authorization object for program.

One program is executed by the end user directly through SE38 t-code. People should not be authorized for that particular program. Is there any standard authorization object for program restriction?

Thanks and regards,

Venkat

Re: Authorization object for programs

alex_cook — Thu, 23 Sep 2010 07:13:23 GMT

Howdy,

The only authorization check is the following - but that will stop you from displaying the source code as well.



              authority-check object 'S_DEVELOP'
                 id 'DEVCLASS' field p_s_develop-devclass
                 id 'OBJTYPE'  field p_s_develop-objtype
                 id 'OBJNAME'  field p_s_develop-objname
                 id 'P_GROUP'  dummy
                 id 'ACTVT'    field l_develop_actvt.

Here DEVCLASS = package name,

OBJTYPE = 'PROG'

OBJNAME = program name,

ACTVT = '03'

Cheers

Alex

EDIT: I assumed you didn't want to change your program to include your own auth check. If that's what you want then use S_DEVELOP with whichever parameters you want.

Edited by: Alex Cook on Sep 23, 2010 4:50 PM

Re: Authorization object for programs

uwe_schieferstein — Thu, 23 Sep 2010 07:15:22 GMT

Hello Venkat

You may use AUTH object S_DEVELOP:


OBJNAME = <name of program>
ACTVT = 16 (Execute)

Regards

Uwe

Re: Authorization object for programs

Sandeep_Panghal — Thu, 23 Sep 2010 07:19:14 GMT

check this thread :