topic Re: Authorization check in Application Development and Automation Discussions

Authorization check

Former Member — Wed, 18 Jan 2012 14:49:33 GMT

Hi,

I developed a custom report that creates Material master record, Bill of Material and Routing. As it includes, Master data, I want to have authorization check. Access for tcode of my custom report will be given only to a few members, but there are chances of having access for tcode is given to an user(who is not eligible), So my manager want to have 1 more authorization check inside the program.

I am not understanding on what can I preventing the execution or program or stop creation of New Material Record, BOM, and ROUTING. Please comment on this along with Objects for Material Master, BOM and Routing .

Thanks in Advance

Re: Authorization check

Former Member — Wed, 18 Jan 2012 15:18:42 GMT

Hi,

At program level you can restrict by calling function module AUTHORITY-CHECK.

AUTHORITY-CHECK OBJECT 'S_TRVL_BKS'

ID 'ACTVT' FIELD '02'

ID 'CUSTTYPE' FIELD 'B'.

IF SY-SUBRC <> 0.

MESSAGE E...

ENDIF.

In the ABAP Development workbench goto More Tools - Authorization - Objects. You will find a list of all the objects with the relevant fields and documents, organized by class.

Alternatively,

You can try creating authorisation object with the help of Tcode SU21.

Take help of your basis team to restrict authorisation for particular user group .

Regards,

Ramya

Re: Authorization check

former_member226519 — Wed, 18 Jan 2012 16:18:15 GMT

if customers/managers don't trust in the authorisation checks you could go a "Stone Age" way:

create a table where you hold all the users names who are allowed to run the report.

At the beginning of your report SELECT from that table with SY-UNAME and if you don't find the name EXIT the report.

Re: Authorization check

Former Member — Fri, 20 Jan 2012 06:24:19 GMT

Hi,

For performing the authorization you can create a an authorization object and ask the basis team to configure the usernames having the authorization.Then use that authorization object to limit the users using your program to create Material master record, Bill of Material and Routing.

For creating the authorization object and using it in your program follow the below link:

http://www.richardsantos.net/2009/03/16/sap-how-to-create-and-use-the-authorization-objects-in-abap/

<begging removed by moderator>

Edited by: Thomas Zloch on Jan 20, 2012