topic Authority check in Application Development and Automation Discussions

Authority check

Former Member — Tue, 11 Jun 2013 11:56:47 GMT

Hi Experts,

i have created an Authorization object using SU21.

In the object say ZGE_FITEST I included

Fields SAKNR -> G/L Account Number (value 89000)

and ACTVT -> show

In the Transaction PFCG i included manually in the Roll of a user this Object

My intention is athat the user is only authorized to see bookings only in this Account

and change no values or see any values on any other accounts

Unfortunately the Authorization check is not working.

Can an body help.

I am very grateful for any help

King

Re: Authority check

JL23 — Tue, 11 Jun 2013 12:25:22 GMT

did you add this new authorization object to a transaction? how shall SAP know that this new object is to be checked?

in SU24 you can assign it to a transaction

Re: Authority check

RaymondGiuseppi — Tue, 11 Jun 2013 12:50:48 GMT

Did you add your own authority-check(s) in some BAdI or validation rule, if no, nothing will happen.

(Some Authority check are implicitaly executed like S_TCODE when calling a transaction, but most must be coded with statement AUTHORITY-CHECK and some FMs)

So you must add your check in some BAdI, Enhancement or rules so the authority-check get performed, also you must code the reaction of the reports and programs, like ignoring or deleting some data, no pain...

Also perform some search on field BEGRU (in tables like KNA1, KNB1, LFA1, LFB1, SKB1, etc.) this field is used in some standard authorization-checks and is an attribute of account numbers.

Regards,

Raymond