topic Re: Authorization on Function modules in Application Development and Automation Discussions

Authorization on Function modules

former_member533596 — Tue, 28 Nov 2017 12:23:41 GMT

Hi.

One can assign authorization groups to executable programs, transaction codes etc., but is it possible to assign a authorization group to a single function module?

The purpose is to block some, but not all, FM's in a function group from being executed

Ole Kristian

Re: Authorization on Function modules

iftah_peretz — Tue, 28 Nov 2017 12:54:21 GMT

Hey,

From the ABAP stand point I would use this as the first lines of code in the desired function.

As for the authorization group assigned to the function itself, I would post a question in the relevant form.

Re: Authorization on Function modules

former_member533596 — Tue, 28 Nov 2017 13:44:29 GMT

Yes, I think I've concluded that the only way to block a FM by authorization is to program the Authorization Check within the FM itself

Re: Authorization on Function modules

retired_member — Tue, 28 Nov 2017 17:30:43 GMT

Or before calling them, if feasible.

Re: Authorization on Function modules

michaB_badura — Tue, 28 Nov 2017 23:10:58 GMT

You could use the authorization object S_RFC, if Your function modules are remote-enabled.