topic Re: Customized T code in Application Development and Automation Discussions

Customized T code

sumitdua — Wed, 29 Oct 2014 12:48:58 GMT

I created a customized t-code for which the restriction needs to be set at company code level. The t-code calls the SAP standard program. For setting the
company code restriction, a new authorization object was created and mapped to t-code. We created company code specific roles and provide required
authorizations but still not able to restrict at company code level. Please provide your inputs.

Re: Customized T code

Former Member — Wed, 29 Oct 2014 12:54:36 GMT

is the authorization object being checked in the program, does it show up in the trace.

Re: Customized T code

sumitdua — Thu, 30 Oct 2014 09:02:11 GMT

no.. its not included in the program

Re: Customized T code

Former Member — Thu, 30 Oct 2014 09:15:20 GMT

Hi SD,

For a standard SAP Program, run the transaction and do an authority trace to find out which authorization objects are touched. You may find the one that gives you what you need. Alternatively, there may be user exits available to add your own authority checks. Please check once.

Regards,

Salil B

Re: Customized T code

RaymondGiuseppi — Thu, 30 Oct 2014 09:41:19 GMT

So you added a new authorization ,object to a customer transaction which call a standard program,

The only check you actually added is executed at initial call of transaction (does user get some authority on this object, read SE93 help for the field authorization object) Then the standard program will behave as previously, so if user change company code, no additional check will be performed...

Look for Customer-exit or BAdI in the program, or for implicit enhancement spot available in the PAI of the screen where company code is input, and add your authority-check. You could also try to create transaction variant(s) with company code already provided (or come from a transaction with parameter) an not changeable.

Regards,

Raymond