topic Customized Authorization Object Not Working in Application Development and Automation Discussions

Customized Authorization Object Not Working

Former Member — Tue, 31 Jul 2007 07:41:14 GMT

Hi ppl,

I created an authorization object (SU21), and including the "control key" field (STEUS) into the authorization object. But after I maintained the profile (PFCG), I found out this authorization object is not checked, while I've maintained the check indicator at (SU24).

Did I miss out any step? Or could anyone guide me what are the procedures when creating an authorization object?

Thanks for your constructive opinions (points will be rewarded to any one who contributes an idea)

Re: Customized Authorization Object Not Working

Former Member — Tue, 31 Jul 2007 08:12:22 GMT

Ty,

You need to include an AUTHORITY-CHECK statement in the appropriate program code. If the auth check is not in the code, it won't be performed & adding objects to transactions via SU24 & PFCG won't make any difference.

Re: Customized Authorization Object Not Working

Former Member — Tue, 31 Jul 2007 08:18:56 GMT

Hi Alex,

Thanks so much.

I'm not sure where shall I include the authority-check statement... is it transaction-specific? That transaction which i'm supposed to control is IW31 and IW32, do you have any idea which program shall i modify or how shall it be done?

Thanks a bunch...

Re: Customized Authorization Object Not Working

Former Member — Tue, 31 Jul 2007 08:26:32 GMT

This is the difficult bit, the best bet is to talk to your ABAP team to see if there are any appropriate User-Exits for IW31 and IW32. If there are, then it may be possible to include the additional check in the code, if not then another control solution may be required.

Re: Customized Authorization Object Not Working

Former Member — Tue, 31 Jul 2007 09:13:16 GMT

Thanks Alex, but my team is kinda busy at the moment

May I know if anyone here knows which User-Exits would be appropriate for me to include authority-check for the control key?? (perhaps I should post it at PM-related forum..)

Thanks..