topic Document authorization check in Application Development and Automation Discussions

Document authorization check

Former Member — Wed, 02 Apr 2014 09:17:25 GMT

Hello,

Is there a BAPI call, that being given a pair 'user name' + 'document number' will say whether the user is authorized for at least read access?

Re: Document authorization check

nabheetscn — Wed, 02 Apr 2014 09:20:46 GMT

Which document authorization are we talking about here..? Which tcode you are using to check document... Please provide the complete details

Nabheet

Re: Document authorization check

Former Member — Wed, 02 Apr 2014 09:28:40 GMT

Well, let say I have a document in that is visible with use of CV04N transaction.

Clearly, when smb. tries to access (i.e. display) the document, SAP performs some authorization object checks:

C_DRAW_BGR

C_DRAW_TCD

and so on, basing on the profile of that user.

Also probably ACLs are checked if assigned any (in EasyDMS terminology).

So my desire is know whether there is a way to perform these checks remotely via BAPI call - passing a user and a document in question.

Please tell me if I can provide more details on my aim.

Re: Document authorization check

RaymondGiuseppi — Wed, 02 Apr 2014 13:42:09 GMT

FM CV115_PERMISSION_CHECK (Try to set a BREAK-POINT at start and or perform some where-used search)

Regards,

Raymond

Re: Document authorization check

Former Member — Thu, 03 Apr 2014 06:58:29 GMT

Well, am I right that an authorization object (namely S_TCODE, C_DRAW_TCD, etc.) shall be passed to the FM and the check will be performed for the 'current' user only?

Can I somehow check any user I choose whether she has access to a document? In other words, CV115_PERMISSION_CHECK wants from me more information than I have (e.g. I have only doc name, number, type + user name; and I do not have all authorization objects linked to user's profile) and at the same time does not allow me choosing the user to be checked.

Re: Document authorization check

RaymondGiuseppi — Thu, 03 Apr 2014 07:56:35 GMT

Then you may copy the FM and add the [FOR USER user]option.

Regard

Raymond