How to find which custom program uses authorization checks

Former Member — Mon, 16 May 2011 16:22:39 GMT

Hi all,

I have been asked to find out which custom ABAP program in our organization is using Authorizations checks and which is not.

Since there are thousands of custom programs I will need to automatize this process somehow. But I am not an ABAP expert and I will need some help.

Could any of you give me an idea of what would be the best strategy to find out if authorization objects/checks exist in a number of ABAP programs? (would a simple text search do?).

Many thanks,

Aldo

Re: How to find which custom program uses authorization checks

Former Member — Mon, 16 May 2011 17:56:26 GMT

If you are looking out for Authorization related to Execution of any program, then look for entries in table TRDIR where field SECU (Authorization Group) is not blank.

Below SAP documentation may help you:

Authorization Group

Authorization group to which the program is assigned.

The assignment of a program to an authorization group plays a role when the system checks whether the user is authorized to:

Execute a program

--> Authorization object S_PROGRAM

Edit a program (-Include) in the ABAP Workbench

--> Authorization object S_DEVELOP

Programs that are not assigned to an authorization group are not protected against display and execution.

Security-related programs should, therefore, always be assigned to an authorization group.

Report RSCSAUTH can also be used to assign programs to authorization groups. This report is documented in detail.

topic How to find which custom program uses authorization checks in Application Development and Automation Discussions

How to find which custom program uses authorization checks

Re: How to find which custom program uses authorization checks