topic Re: Authorization - SE93 in Application Development and Automation Discussions

Authorization - SE93

antonio_bruno — Tue, 21 Feb 2012 10:33:10 GMT

Hi,

I've created a custom transaction (referred to a query) to extract the standard price (MBEW).

I have the problem that users who can not see the standard price of particular plant (correct in relation to the authorization), however, if executed the transaction can show the standard price of all valuation areas.

How can i set the SE93 to align the authorization of the transaction with the authorization of the user?

Thanks.

Best regards.

Antonio

Re: Authorization - SE93

praveen_reddy2 — Tue, 21 Feb 2012 10:39:18 GMT

Hi,

Maintain a Authorizarion Group for this tranasction.

In your program you have to call the authority object.( which is assigned in in Tcode )

To check the user has a authoorization or not.

Regards,

PraVeen.

Re: Authorization - SE93

Former Member — Tue, 21 Feb 2012 11:33:50 GMT

Hi,

Please check this link.

<removed by moderator>

Moderator message: please don't post just link(s) without explaining the relevance.

Edited by: Thomas Zloch on Feb 21, 2012

Re: Authorization - SE93

antonio_bruno — Tue, 21 Feb 2012 14:24:49 GMT

Hi,

which object should I use in the field Authorization object? is M_MATE_MZP ok? My transaction is related to MBEW-BWKEY and not to WERKS.

Thanks.

Best regards.

Antonio

Re: Authorization - SE93

vijaymanikandan — Tue, 21 Feb 2012 15:02:21 GMT

You can create an authorisation object called as ZPRICE and inside that you can have 3 fields TCODE, WERKS and ACTVT.

Then you can create a role including this authorisation obejct.

Regards,

Vijay V

Re: Authorization - SE93

antonio_bruno — Tue, 21 Feb 2012 15:21:31 GMT

Hi,

i've add M_MATE_MZP (fields WERKS and ACTVT) to SE93, but didn't work. My doubt is that my query is based on BWKEY not on WERKS.

Maybe, should i use BWKEY instead WERKS?

Thanks.

Best regards.

Antonio

Re: Authorization - SE93

vijaymanikandan — Tue, 21 Feb 2012 15:27:11 GMT

Kindly use BWKEY since its is Valuation area. Most cases valuation key and plant will be the same. Make sure that the user who is using the transaction has these values assigned.

Regards

Vijay V

Re: Authorization - SE93

antonio_bruno — Wed, 22 Feb 2012 08:32:02 GMT

Hi,

i've tried both the solutions, but without results.

It seems that the authorization didn't work at the query level (if i click F1, BWKEY is associated with the table /1BCDWB/IQ000000000137).

So, i've tried with:

- SE93: Authorization object: M_MATE_MZP

- SQ02: Code the Authority-check in section 6 - END-OF-SELECTION:

AUTHORITY-CHECK OBJECT 'M_MATE_MZP'

ID 'ACTVT' FIELD '03'

ID 'WERKS' FIELD MBEW-BWKEY.

if sy-subrc = 0.

MESSAGE 'Insufficient Authorization.Some data is truncated.' TYPE 'I'.

endif.

Thanks.

Antonio

Re: Authorization - SE93

vijaymanikandan — Wed, 22 Feb 2012 10:51:57 GMT

Can you explain the entire process that you are doing? If it is question that you have created a new transaction for a ABAP query then its straight forward. Have you tried to run a SU53 after you get the failure or run a ST01 authorisation trace for the entire process.

Regards,

Vijay V

Re: Authorization - SE93

antonio_bruno — Wed, 22 Feb 2012 12:07:54 GMT

Hi,

the process that i have done is:

- create an infoset (with the code related to the authorization object) and a query.

- create a transaction linked to the query and to the authorization object.

- update the role in relation to the specific Valuation Area.

But when i execute the Z transaction the specific user can see the datas of all the valuation areas.

Thanks.

Antonio

Re: Authorization - SE93

vijaymanikandan — Wed, 22 Feb 2012 13:08:14 GMT

Hi Antonio,

OK. Then the problem is in the data that is being selected and displayed.

You have to check the code in the Infoset that you are writing. If your user belongs to plant X and on the selection screen you give an input as plant for Y do you see all that belongs to Y for which he is not authorised to see?

What are the tables that you have linked in your infoset?

Vijay V

Re: Authorization - SE93

antonio_bruno — Wed, 22 Feb 2012 13:51:45 GMT

Hi Vijay,

in the infoset i've linked the VBRP with the MBEW by MATNR (left outer join).

Exactly. I want that the user belongs to plant X can see only the records of the MBEW related to the Valuation Area (MBEW-BWKEY) X, regardless of the valuation area inserted in the selection value of the report.

I've tried to work directly on the field BWKEY, so i've used the authorization object ZPRICE. I've modified the SE93, PFCG and the SQ02 with the following code:

AUTHORITY-CHECK OBJECT 'ZPRICE'

ID 'ACTVT' FIELD '03'

ID 'BWKEY' FIELD MBEW-BWKEY.

if sy-subrc = 0.

MESSAGE 'Insufficient Authorization.Some data is truncated.' TYPE 'I'.

endif.

But with the same results.

Thanks and regards.

Antonio

Re: Authorization - SE93

vijaymanikandan — Wed, 22 Feb 2012 16:17:00 GMT

In which event have you written this code?

I think you can write the code in Code section AT SELECTION SCREEN in the infotype. In this code section you can check the authorisation and then delete the other valuation keys which are not belonging to the user's valuation area.

Hope this will help.

Regards

Vijay V

Re: Authorization - SE93

antonio_bruno — Thu, 23 Feb 2012 08:05:09 GMT

Hi Vijay,

SAP didn't allow me to insert the following code in the section 9 - AT SELECTION-SCREEN.

AUTHORITY-CHECK OBJECT 'ZPRICE'

ID 'ACTVT' FIELD '03'

ID 'BWKEY' FIELD MBEW-BWKEY.

if sy-subrc = 0.

MESSAGE 'Insufficient Authorization.Some data is truncated.' TYPE 'I'.

endif.

So i've tried to insert the code in the section 13 - AT SELECTION-SCREEN OUTPUT, but the results is the same the

Best regards.

Antonio

Re: Authorization - SE93

antonio_bruno — Thu, 23 Feb 2012 14:24:42 GMT

Hi Vijay,

i've modified the following code:

AUTHORITY-CHECK OBJECT 'ZPRICE'

ID 'ACTVT' FIELD '03'

ID 'BWKEY' FIELD MBEW-BWKEY.

if sy-subrc <> 0.

MESSAGE 'Insufficient Authorization.' TYPE 'E'.

endif.

and inserted it in the section 5.

Now the trasaction works properly.

Thanks.

Antonio

Re: Authorization - SE93

vijaymanikandan — Thu, 23 Feb 2012 14:33:16 GMT

Great. Kindly close the thread and mark it answered and reward points to helpful posts.

Regards

Vijay V

Re: Authorization - SE93

antonio_bruno — Thu, 23 Feb 2012 14:54:06 GMT

Closed.

Regards.

Antonio