topic Re: Authorization at object level in Application Development and Automation Discussions

Authorization at object level

Former Member — Mon, 03 Sep 2007 06:15:19 GMT

Dear experts,

We are using CRM 5.0 (WebIC and PCUI). We have 3 services orders (business transactions) that we use as templates . We want only users with admin role to be able to display and change them. Currently, everyone has access to them.

How could we do that?

Thanks in advance

Stephanie

Re: Authorization at object level

Former Member — Mon, 03 Sep 2007 10:53:32 GMT

Just restrict the authorizations (for those transactions) from the general role/profile which everyone has.

Re: Authorization at object level

Former Member — Mon, 03 Sep 2007 22:57:07 GMT

Hi,

What is the authorization object to restrict at object level?

Thanks

Stephanie

Re: Authorization at object level

Former Member — Tue, 04 Sep 2007 09:05:12 GMT

Hi Stephanie,

Check authorization objects in SU24-> your t-code -> execute.

Click on check indicator->Field values.

You will get authorization object for given t-code.

Regards,

Payal Patel

Re: Authorization at object level

Former Member — Tue, 04 Sep 2007 12:48:06 GMT

The best way to determine this would be to run a trace with ST01. It really depends upon if you have created any custom CIC profiles as well. SU24 may not provide complete information when attempting to determine which auth objects are involved here.

Some of the auth objects involved may be

CRM_ORD_LP

CRM_ORD_PR