topic authorization object issue in Application Development and Automation Discussions

authorization object issue

Former Member — Fri, 08 Dec 2006 19:56:38 GMT

Hi ,

where can i search for existing authorization object. i am looking somethig with user and plant.

does any standard authorization of such sort eists.

Let me know

waiting for your replies

thanks

venki

Re: authorization object issue

Former Member — Fri, 08 Dec 2006 19:58:08 GMT

You can check in transaction SE38 - > Attributes. This will tell you the authorisation object the program is using.

- Guru

Re: authorization object issue

Former Member — Fri, 08 Dec 2006 19:59:34 GMT

You can do an F4 help to get the list of objects in the SE38-> Attributes screen..

- Guru

Re: authorization object issue

Former Member — Fri, 08 Dec 2006 20:07:37 GMT

try these trancodes

SU02

SU03

SU20

SU21

Rewards if Helpful

Viky

Re: authorization object issue

Former Member — Fri, 08 Dec 2006 20:08:20 GMT

Hi,

I HAVE A PROGRAM FOR WHICH I HAVE TO ADD AAUTHORIZATION OBJECT BUT BEFORE THAT I HAVE TO KNOW WHETHER THERE EXISTS AN AUTHORIZATION THAT WOULD SATISFY MY NEED I.E I NEED TO CHECK WHETHER A USER HAVE BEEN AUTHORIZED TO APARTICULAR PLANT.

THANKS

VENKI

Re: authorization object issue

Former Member — Fri, 08 Dec 2006 20:09:27 GMT

In That case you can use transaction SU02 or SU03 to do that.

Regards,

Guru

Re: authorization object issue

Former Member — Fri, 08 Dec 2006 20:13:04 GMT

For the same cae go to the below tran codes and search for your type

SU02

SU03

SU20

SU21

Thanks

Viky

Re: authorization object issue

Former Member — Fri, 08 Dec 2006 20:15:40 GMT

Hi Venki,

Authorization objects will be stored in table TOBJ.

Check whether there is an entry in TOBJ before you proceed to create a new one.

TOBJ-OBJCT is the Authorization Object.

TOBJ-BNAME is the user name.

Thanks,

Vinay

Re: authorization object issue

Former Member — Fri, 08 Dec 2006 20:50:50 GMT

Hi ,

can you be more clear.

How do addd users to authorization object.

thanks

venki

Re: authorization object issue

ferry_lianto — Fri, 08 Dec 2006 20:59:16 GMT

Hi Venki,

Please check this link perhaps they may help.

http://help.sap.com/saphelp_bw21c/helpdata/en/52/6712ac439b11d1896f0000e8322d00/frameset.htm

http://help.sap.com/saphelp_bw33/helpdata/en/52/67167f439b11d1896f0000e8322d00/frameset.htm

Regards,

Ferry Lianto

Re: authorization object issue

Former Member — Fri, 08 Dec 2006 21:07:04 GMT

Transaction authorization_display_objects......

for a particular user and authorization object combination yuo can go and check in tcode suim.

Re: authorization object issue

Former Member — Fri, 08 Dec 2006 21:09:34 GMT

You add authorization objects to role (in tcode pfcg) and then assign those roles to users in transaction su01.

There are few strps to be followed for that.

Re: authorization object issue

Former Member — Fri, 08 Dec 2006 22:02:16 GMT

Hi,

I found the following in one of the forums by RAVI KANTH TALAGANA

I HAVE COUPLE OF QUESTIONS IN HERE

Example

Check whether the user is authorized for a particular plant. In this case, the following authorization object applies:

Table OBJ: Definition of authorization object

M_EINF_WRK

ACTVT

WERKS

Here, M_EINF_WRK is the object name, whilst ACTVT and WERKS are authorization fields. For example, a user with the authorizations

M_EINF_WRK_BERECH1 -

> WHAT DOES THIS REFER(DIFFER

ACTVT 01-03 FROM M_EINF_WRK

WERKS 0001-0003 .

WHAT DOES ACTVT 01-03 AND WERKS 0001-0003 . MEAN

0001 MEANS A PLANT OR WHAT .

HE IS TALKING ABOUT THE USER NAME BUT I DON'T SEE AN Y USERNAME BEING PASSED RIGHT.

can display and change plants within the Purchasing and Materials Management areas.

Such a user would thus pass the checks

AUTHORITY-CHECK OBJECT 'M_EINF_WRK'

ID 'WERKS' FIELD '0002'

ID 'ACTVT' FIELD '02'.

AUTHORITY-CHECK OBJECT 'M_EINF_WRK'

ID 'WERKS' DUMMY

ID 'ACTVT' FIELD '01':

but would fail the check

AUTHORITY-CHECK OBJECT 'M_EINF_WRK'

ID 'WERKS' FIELD '0005'

ID 'ACTVT' FIELD '04'.

To suppress unnecessary authorization checks or to carry out checks before the user has entered all the values, use DUMMY - as in this example. You can confirm the authorization later with another AUTHORITY-CHECK.

WAITING FOR YOUR REPLIES THANKS

Re: authorization object issue

Former Member — Sat, 09 Dec 2006 03:14:47 GMT

any thoughts on this

thanks

Re: authorization object issue

Former Member — Sat, 09 Dec 2006 05:20:40 GMT

Hi Venky,

Try following the steps.

1. Create a Custom Z authorization Object in Tcode SU21. Try including it in the appropriate Authorization Class so that it can be assigned later.

Make sure you save the changes in a TR and do make a note of this TR

2. Please include this Object in the piece of Code by ' AUTHORITY CHECK' so that this Object is taken care in the coding and gets checked ...

Please make sure the error handling is also done by making the messages clear like " You are Not authorized to act on this' etc etc ..

3. Creating a single role in PFCG and assign this Tcode to which this Report is assigned and then this Object is included to that Role manually.

The above process can ensure that the Role assigned to any User can perfrom the actions required and rest all would be denied.

Please let me know if this is what u have been looking for.

Br,

Sri

Award points for helpful answers

Re: authorization object issue

Former Member — Sat, 09 Dec 2006 06:14:30 GMT

Hi Venky,

A good doc to check...as well..

http://help.sap.com/saphelp_bw21c/helpdata/en/52/6712ac439b11d1896f0000e8322d00/frameset.htm

Br,

Sri

Award points for helpful answers