topic tcode <-> Auth. obj association using tables in Application Development and Automation Discussions

tcode <-> Auth. obj association using tables

Former Member — Thu, 14 Mar 2013 08:25:05 GMT

Hi,

I am having problems associating authorization objects to some transactions. I am going the table way and standart documentations points to USOBT or USOBT_C tables. However *SOME* Z* transactions(which I know use authorization objects) do not have any entries present in these tables for some reason.

Is this common? Can anyone help me understand why?

And most important of all, can anyone point me to another table(or tables if they needed to be linked) inorder to observe auth.obj. <-> tcode association?

Thanks,

Bora

Re: tcode <-> Auth. obj association using tables

Former Member — Thu, 14 Mar 2013 09:51:34 GMT

Hi Bora,

If you looking for auth object <>Tcode relation maintained in SU24. then please use table TSTCA

Re: tcode <-> Auth. obj association using tables

Former Member — Thu, 14 Mar 2013 13:15:48 GMT

transaction :- SUIM

Thanks

Abhijeet

Re: tcode <-> Auth. obj association using tables

Former Member — Thu, 14 Mar 2013 14:29:12 GMT

Hi,

Auth checks in transactions only appear in the USOB* tables once they are associated through SU24. If they have never been associated then you will not see them. This is very common where security has been administered poorly.

To get the info you will have to go through the code, update SU24 and then you will have a more accurate list. As Binish stated, you could use TSTCA to see where a static auth check has been assigned against the transaction code in SE93.

Re: tcode <-> Auth. obj association using tables

Former Member — Thu, 14 Mar 2013 14:29:45 GMT

Hi Abhijeet,

Can you please explain how the OP will use SUIM to solve his issue?

Re: tcode <-> Auth. obj association using tables

Former Member — Thu, 14 Mar 2013 20:20:58 GMT

Hello

TSTCA returns the initial auth check and not the actual/required objects

Kind regards

David

Re: tcode <-> Auth. obj association using tables

Former Member — Thu, 14 Mar 2013 20:22:15 GMT

SUIM won't help find the related authorisation checks..at aleast not in an easy way that I can see - please could you explain?

Kind regards

David

Re: tcode <-> Auth. obj association using tables

Former Member — Thu, 14 Mar 2013 20:27:00 GMT

Hello

I don't think your table entries approach will work.

How do think the tables entries you are searching on are populated in the first place? Who does this - security, basis, functional, SAP These are custom transactions rather that SAP delivered which will not initially include sufficient SAP/Customer values.

Cheers

David

Re: tcode <-> Auth. obj association using tables

JimRadiantExplorer — Mon, 18 Mar 2013 02:59:39 GMT

Hello,

For Z* transations, you need to maintain the values in SU24 by yourself.

After that, you can maintain "Check indictor" and authorization objects which will be proposed while

adding the tcode in role menu.

Thanks.

Jim