topic Re: Plant Authorization in Application Development and Automation Discussions

Plant Authorization

Former Member — Tue, 24 Oct 2006 10:48:27 GMT

Hi,

I was trying to restrict the user to get data for spefic plant . Is their a std approach to do this. I would like to have this restriction to custom programs/reports only.

Awaiting a reply

Re: Plant Authorization

Former Member — Tue, 24 Oct 2006 11:19:47 GMT

Hi Guys,

Any replies pls...

Re: Plant Authorization

Former Member — Tue, 24 Oct 2006 11:49:18 GMT

Hi,

Can You elaborate Your requirement.

Thanks,

sksingh

Re: Plant Authorization

roland_spindler — Tue, 24 Oct 2006 11:53:50 GMT

Hi,

It depends upon the kind of data you want to display and if you are using a standard transaction or not.

best regards

Roland

Re: Plant Authorization

Former Member — Tue, 24 Oct 2006 12:00:03 GMT

Hi ,

I am not quite sure but user restrictions are basically done through authorisation role checks...usually we write function modules which allows access to users or restrict them.

for instance we create a program..a report or program and create a transaction code for it...we assign the transaction codes to roles: users,clerks,admin officers and superusers using Badis.

eg: we have transaction code t0001 for program ZTEST and you want him to give authorisation ...then u check

if tcode = t0001

and (criterion eg:sy-uname NE 'PRIYA')

message 'No Authorisation' type 'E'.

endif.

This is one method which i have seen widely being implemeted..Although the whole example was vague i hope it gave you some basic idea...

Regards

Re: Plant Authorization

Former Member — Tue, 24 Oct 2006 12:04:24 GMT

Hi Priya,

That purely depends on the Roles, You have restrict there itself. You can put the same condition in program also.

Regards,

Chandra.

Re: Plant Authorization

Former Member — Tue, 24 Oct 2006 12:07:48 GMT

If you want to apply it only for custom programs/reports you must check first if and what authority-checks are implemented in the code (what objects, activities etc.). Once you get that information you can adjust your profiles.

Re: Plant Authorization

Former Member — Tue, 24 Oct 2006 12:08:23 GMT

Hi,

Yes, it is possible with the authority check object. Here the basis/ function people will creat the Object and assigns the valid plants to it. we need to add the following code in the custome program to restict the execution to the specific plant.

Authority check for Plant

AUTHORITY-CHECK OBJECT 'Z_WERKS'(Authority check object)

ID 'ACTVT' FIELD '03'

ID 'WERKS' FIELD P_WERKS(Selection parameter)

IF sy-subrc NE 0.

MESSAGE e000 WITH

'No authorization to Division:'(054)

i_spart.

ENDIF.

Hope this will help you.

Regards,

Satya

Re: Plant Authorization

Former Member — Tue, 24 Oct 2006 12:11:54 GMT

Hi ,

Create an authorization object for plant and assign allowed users to this object.

and use following code to restrict your user.

authority-check object 'ZPLANT'

id 'WERKS' field '__________'

id 'ACTIVITY' field '__________'.

if sy-subrc ne 0.

message' No authorization to access plant details'.

endif.

Regards,

Sudheer