topic Re: SU21 in Application Development and Automation Discussions

SU21

Former Member — Mon, 10 Dec 2007 04:59:41 GMT

what is the funcion module created in SU21.

Is this funtion module is comparing checking the authorisation for the value that we pass through our program with the values of authorisation/ roles assigned to that user

Re: SU21

daixiong_jiang3 — Mon, 10 Dec 2007 05:20:30 GMT

SU20---Maintain Authorization Fields

SU21---Maintain Authorization Objects

When we need to do a authority check by ourselves,we should define severial data fields we want to check,this can be done in se11 &SU20, then we consolidate these fields into one authority-check object using SU21,at the same time some permitted values will be defined.

then in the Z* program, we can use the following statement to do an authority-check:

AUTHORITY-CHECK OBJECT 'S_CARRID'

ID 'CARRID' FIELD carr

ID 'ACTVT' FIELD '03'.

IF sy-subrc <> 0.

MESSAGE 'No authorization' TYPE 'E'.

ENDIF.

Re: SU21

Former Member — Mon, 10 Dec 2007 05:25:17 GMT

i dont have authorisation for accessing the SU20 and SU21 thats why i was asking the funcion module directly to see how the authority-check statement is workin comparing the values passed in the program with the user master data maintained already

Re: SU21

Former Member — Mon, 10 Dec 2007 08:04:39 GMT

If you think an authorisation failure is happending in a transaction, run the transaction, then run transaction SU53, this will show any failures along with the authorisation object and value which failed.