topic Re: Check authorization at TCode Z... in Application Development and Automation Discussions

Check authorization at TCode Z...

Former Member — Tue, 22 Nov 2011 08:07:22 GMT

Hi All,

I have a problem with authorization, please help me !

I have Tcode for customize report (HR). With user A, for one or two standart tcode, he has aut with Per. Area (10,20,30), but in cust. tcode Z... , he has only one aut in Per. Area (20). I used SU24 to assign aut. object (P_ORGIN) to Tcode Z... to check Personal Area and assign to it P.Area(20). But it not effect. How to do it ! Thanks for all idea !

Re: Check authorization at TCode Z...

eduardo_hinojosa — Tue, 22 Nov 2011 08:19:14 GMT

Add the auth.object in your coding. Use 'Pattern' in ABAP Editor (SE38) for 'AUTHORITY CHECK'. After manage the error message with the purpose that user know that he or she must run tcode SU53.

Regards

Eduardo

Edited by: E_Hinojosa on Nov 22, 2011 9:20 AM

Re: Check authorization at TCode Z...

Former Member — Tue, 22 Nov 2011 08:32:28 GMT

Hi ,

You should write AUTHORITY CHECK statement in you code.Then as per personal area restrict the authorization.

Re: Check authorization at TCode Z...

Former Member — Tue, 22 Nov 2011 08:44:45 GMT

Yes, in the program I did.

AT SELECTION-SCREEN.
  AUTHORITY-CHECK OBJECT 'P_ORGIN'
  ID 'PERSA' FIELD pnpwerks-low
  ID 'PERSK' FIELD pnppersk-low.

  IF sy-subrc <> 0.
    MESSAGE 'Un authorization !' TYPE 'E'.
  ENDIF.

But it also pass

Re: Check authorization at TCode Z...

Former Member — Tue, 22 Nov 2011 08:47:21 GMT

Hi E_Hinojosa ,

No message error, so SU53 show nothing .......

thanks for yr answer !

Re: Check authorization at TCode Z...

SuhaSaha — Tue, 22 Nov 2011 10:24:47 GMT

Hello,

You need to add the auth. object to relevant authorization role(s), assign this role to the user. After these steps are complete run the report!

I'll advise take help of the Security team.

BR,

Suhas