topic Re: authority object in Application Development and Automation Discussions

authority object

Former Member — Mon, 28 Oct 2013 17:58:19 GMT

Hi guys,

I need to do a validation of some users (like this)

IF SY-UNAME = 'ES1234' AND SY-UNAME = 'FR2345' AND [......] " lots of users

ADD 1 TO CONT.

MESSATE S34(ZHR) TYPE 'I'.

ENDIF.

The quantity of users are a lot to write 'IF SY-UNAME = ''

I don't know if I can use a rol or something like this.

Thanks a lot.

Best regards.

Ana.

Re: authority object

Former Member — Mon, 28 Oct 2013 18:09:17 GMT

Hi Ana,

I do not think you should hard code the user ids. Can they be put into a configuration type of table and retrieved in the program and loaded into a range table? Then you can use "If sy-uname in r_uname....

Regards,

Steve

Re: authority object

ThomasZloch — Mon, 28 Oct 2013 21:08:51 GMT

Never hard code checks on user IDs. Please explain more about the rationale for this check, otherwise it is not possible to recommend a good solution.

Thomas

Re: authority object

vladimir_erakovic — Mon, 28 Oct 2013 21:41:50 GMT

Hi Ana,

In case of some kind of validation, usually the best practice is to create configuration table along with a simple program for filling the entries. Then when you need to validate something in any of your programs you can just declare you configuration table, e.g. :

TABLES: zconf1.

and then do an 'empty' select:

SELECT SINGLE * FROM zconf1

WHERE some condition.

IF sy-subrc = 0.

Entry exists.

ELSE.

Entry doesn't exists.

ENDIF.

Hope it helps.

Best regards,

Vladimir

Re: authority object

JimRadiantExplorer — Tue, 29 Oct 2013 02:10:25 GMT

Hi,

In this case, I recommend you use user group(Tab Groups in SU01).

Groups can be maintained in SUGR.

The user's group information is stored in table USGRP_USER.

Thanks.

Jim

Re: authority object

Ajit_K_Panda — Tue, 29 Oct 2013 05:24:13 GMT

Hi Ana,

If all the user fall into a single role, then you can use authorization object which can be assigned to the ROLE.. And in your program you can check that authorization object's value and write your code accordingly.

Check the following link:

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/a92195a9-0b01-0010-909c-f330ea4a585c?QuickLink=index&overridelayout=true&5003637386464

Hope this helps.

Regards,

Ajit

Re: authority object

Ruediger_Plantiko — Tue, 29 Oct 2013 06:56:22 GMT

If the users in question are only technical users (developers and other geeks), who want to see some technical background of the program, I would recommend a log-point or even break-point with checkpoint ID. Users can subscribe to the checkpoint ID using transaction SAAB.Only when they activated the checkpoint for themselves, the data will be logged at the log-point, and only then the system will stop at a "break-point id ..." statement.

See

http://help.sap.com/abapdocu_702/en/abencheckpoints.htm

Re: authority object

Former Member — Wed, 30 Oct 2013 17:18:56 GMT

Thanks Ajit . I have do it a new role with all users.

Then I used the function module 'CRM_ROLES_OF_USER_GET' , in the report to validate the user.

CALL FUNCTION 'CRM_ROLES_OF_USER_GET'

EXPORTING

USER_NAME = SY-UNAME

TABLES

ROLES_OF_USER = T_ROLES

EXCEPTIONS

NO_ROLES_AVAILABLE = 1

OTHERS = 2.

Thanks to all.

Regards.

Ana.