topic Re: BAPI authorization doubt in Application Development and Automation Discussions

BAPI authorization doubt

Ziv_Marcovich — Wed, 17 Jun 2015 11:35:20 GMT

Hello,

I Run BAPI to update notification after the save of PM order
The user should have authorization to this code execution but not to tcode IW22

Is it possible from authorization perspective ?

Thanks

Ziv

Re: BAPI authorization doubt

Former Member — Wed, 17 Jun 2015 13:22:16 GMT

Yes, infact it is mandatory.

Cheers,

Julius

Re: BAPI authorization doubt

Ziv_Marcovich — Wed, 17 Jun 2015 13:33:26 GMT

Hi Julius,

Thanks for your reply ,

Just to conirm You mean that the user will not have dialog IW22 authorization , yet he can run the BAPI that update the notification .

Regads,

Ziv

Re: BAPI authorization doubt

Former Member — Wed, 17 Jun 2015 13:46:14 GMT

Yep, the definition of a BAPI is that it must functionally perform the same processing as dialog functions and must be remote enabled, but is not allowed to check S_TCODE.

If the entry point for the user is the BAPI, then you should authorize S_RFC plus the application authorizations needed. S_TCODE is not needed even if functionally the same as IW22.

Cheers,

Julius

Re: BAPI authorization doubt

Ziv_Marcovich — Wed, 17 Jun 2015 14:14:59 GMT

Thank you Julius

Re: BAPI authorization doubt

Former Member — Wed, 17 Jun 2015 19:08:25 GMT

BTW: what is the concern with IW22? It is a bit of an overkill to access CAD drawings and the SU24 proposals for changing the user status are very blunt, but other than that the transaction is harmless and one would be happy if people did their work.

I generally observe that customers do not care much about I* authorizations in PM.

Cheers,

Julius