topic SU24 - add auhorization objects in Application Development and Automation Discussions

SU24 - add auhorization objects

Former Member — Fri, 18 Feb 2011 11:12:11 GMT

Hi experts,

I need an authorization check on the level of "sales group" (VKGRP) in some SD transactions (for example in VA05).

I tried it with object V_VBKA_VKO and i added the object to transaction VA05, using SU24.

Then I created a new role with the requested authorization on Object V_VBKA_VKO. Unfortunately the tests are nagative - the authorization trace shows, that V_VBKA_VKO is not checked while processing the transaction and the user sill can see all customer data.I also checked the customer tables usobx_c and usobt_c, the values are ok.

What ist my mistake, can somebody help me?

Thanks & regards,

Mirjam

Re: SU24 - add auhorization objects

Bernhard_SAP — Fri, 18 Feb 2011 11:58:59 GMT

Hello,

you need to trigger the authority-check in the coding of the applicaiton.

Try the search for instance for 'authority-check' - this will give you some mopre useful hints.

b.rgds, Bernhard

Re: SU24 - add auhorization objects

koehntopp — Fri, 18 Feb 2011 12:04:48 GMT

Plain & simple: if the ABAP code for VA05 does not check for V_VBKA_VKO, adding to SU24 will not change that.

SU24 only affects the checks for objects that already are in the code.

Frank.