topic Re: ABAP Code To Authenticate Users in Application Development and Automation Discussions

ABAP Code To Authenticate Users

Former Member — Mon, 26 Sep 2005 23:22:46 GMT

Hi,

How can I code a ABAP program/function which will authenticate a user based only on their user id? Do not want to use their password.

I want the entire authentication process to happen in the ABAP code.

Any ideas?

Thanks,

Audrey

Re: ABAP Code To Authenticate Users

Former Member — Mon, 26 Sep 2005 23:46:17 GMT

Go to transaction code SE37 and do a search on susr_user*

You may find a function module which may solve your purpose.

Thanks

Re: ABAP Code To Authenticate Users

Former Member — Tue, 27 Sep 2005 03:33:56 GMT

Your requirement is not clear. The user id of a user running an ABAP will be there in SY-UNAME .

Authority checks command AUTHORITY-CHECK automatically checks the authorization of the user running the report.

You can put your security check using above command .

Cheers

Re: ABAP Code To Authenticate Users

Former Member — Tue, 27 Sep 2005 03:56:38 GMT

Hi Audrey,

SAP uses authorization objects for authority checks.

You need to create these objects in SAP and check for the authorizations in ur program for this object you created by using the abap statement authority-check.

the auth object can have various parameters, based on which auth is checked. Read sap docu for more info.

Remember 2 reward poitns and close this thread if ur Q is answered.

Rgds,

Prash>

Re: ABAP Code To Authenticate Users

Former Member — Tue, 27 Sep 2005 04:01:52 GMT

Hi,

To check the authorization of the user of an ABAP program, use the AUTHORITY-CHECK statement:

AUTHORITY-CHECK OBJECT '<object>'

ID '<name1>' FIELD <f1>

ID '<name2>' FIELD <f2>

.............

ID '<name10>' FIELD <f10>.

There is an authorization object called F_SPFLI. It contains the fields ACTVT, NAME, and CITY.

SELECT * FROM SPFLI.

AUTHORITY-CHECK OBJECT 'F_SPFLI'

ID 'ACTVT' FIELD '02'

ID 'NAME' FIELD SPFLI-CARRID

ID 'CITY' DUMMY.

IF SY-SUBRC NE 0. EXIT. ENDIF.

ENDSELECT.

If the user has the following authorizations for F_SPFLI:

ACTVT 01-03, NAME AA-LH, CITY none,

and the value of SPFLI-CARRID is not between "AA" and "LH", the authorization check terminates the SELECT loop.

Hope it helps u.

Thanks&Regards,

Ruthra.R

Re: ABAP Code To Authenticate Users

Former Member — Tue, 27 Sep 2005 15:31:54 GMT

I basically want to the ABAP program to login the user based only on the user name.

I'm writing a custom SSO solution because our 3rd party application doesn't fit into any of the traditional SSO models.

Is it possible to login a user using ABAP?

Re: ABAP Code To Authenticate Users

Former Member — Tue, 27 Sep 2005 16:13:02 GMT

I think you can set up a remote enabled FM that logs on a user anonymously and also passes the userid of the user. You would have to set up the destination in SM59. The FM would then have to look at whatever tables you need to need to verify the user yourself.

Rob