topic Re: Authorization field restriction in Application Development and Automation Discussions

Authorization field restriction

Former Member — Thu, 15 Nov 2007 15:43:33 GMT

I have a object S_WFAR_OBJ. This object has a auth field which is object type (OAOBJEK). I would like users to have access to all except a certain object type.

Is there a way this can be restricted?

- ravi

Re: Authorization field restriction

Former Member — Thu, 15 Nov 2007 16:30:47 GMT

If it allows from and to then you could create a range that contains everything but the single object type.

Re: Authorization field restriction

Former Member — Thu, 15 Nov 2007 17:26:40 GMT

The entries are alphabets. So I cannot enter a range.

I did wildcard stuff like (A, B) to ensure that it would work with everything except the one which should be excluded. However what I want is something like

ALL EXCEPT a certain object type.

Is there a better way of doing it?

any ideas?

Ravi

Re: Authorization field restriction

Former Member — Thu, 15 Nov 2007 18:08:42 GMT

Hi Ravi,

SAP security is additive & doesn't support "everything except nnnn" unfortunately.

The way you have done it is the only way.

Re: Authorization field restriction

Former Member — Thu, 15 Nov 2007 20:45:10 GMT

Hi Ravi,

Like Alex rightly said, in SAP we cant configure to deny access to a object, we can only give access to an object.

Regarding your query, cant you just select all objects types under S_WFAR_OBJ, and just de-select the object you dont want to give access to ?