topic Re: How to create authorization group to restrict a specific program in Application Development and Automation Discussions

How to create authorization group to restrict a specific program

Former Member — Mon, 29 Aug 2016 07:20:45 GMT

Hi Experts,

I know this is a very basic question, but could not find the answer that satisfied me.

Can anyone please tell me how to create a new authorization group to restrict a specific program?

Thanks in Advance,

Parshuram

Re: How to create authorization group to restrict a specific program

Sandra_Rossi — Mon, 29 Aug 2016 20:29:24 GMT

SU21

EDIT : sorry for the confusion, one term for several notions :

SM30 V_TPGP - create authorization group for programs - assign one to a program via SE38 or to multiple programs via program RSCSAUTH
SM30 V_BRG or V_TBRG - create authorization group for tables
SU21 - create authorization class (and authorization object)

Re: How to create authorization group to restrict a specific program

deepak_sharma_sap — Tue, 30 Aug 2016 01:22:42 GMT

Hi,

Use SU21 to create Authorisation object.(ZTEST)

Chose the value for Authorisation Field "ACTVT".

Save and Activate.

Assign that Authorisation object to one of the Authorisations of user in SUIM.

Then in you report to check if user has that authorisation check using code

AUTHORITY-CHECK OBJECT 'ZTEST' for user sy-uname ID 'ACTVT' Field '02'.

if sy-subrc = 0

"Then user can execute else not.

Endif.

Thanks

Deepak

Re: How to create authorization group to restrict a specific program

Former Member — Tue, 30 Aug 2016 02:48:17 GMT

Hi Deepak,

I am talking about how to create authorization group not authorization objects.

We can create authorization object using SU21 but how to create authorization group for reports?

Could you please anyone let me know how to create authorization group for reports?

Thanks

Parshuram

Re: How to create authorization group to restrict a specific program

RaymondGiuseppi — Tue, 30 Aug 2016 06:20:01 GMT

Program Authorization groups are checked in relation with Authoriztion objects S_PROGRAM, S_DEVELOP, their values corresponds to field P_GROUP of those objects. values are stored in table TPGP, text in TPGPT, values are managed with SM30.

Regards,

Raymond