topic Re: Object Authorization ??? in Application Development and Automation Discussions

Object Authorization ???

Former Member — Mon, 25 Feb 2008 15:08:19 GMT

In a HR Tcode Eg: PA30 the object P_TCODE is checked but not maintained in SU24 and when the Tcode is added to a role the object is not pulled in the role ....but still the TCode has the authorization when it is assigned to a user through a role....P_TCODE performs the first level security check..then how is this possible?

Re: Object Authorization ???

Former Member — Mon, 25 Feb 2008 16:05:18 GMT

Take a look at the documentation on P_TCODE in SU21.

It is an alternate object for checking the transaction code authority before starting the transaction, if it should not normally be started directly via the command window (so granting S_TCODE is undesirable).

It is used, for example, in transaction HRRSM00FBA (according to SU24).

Cheers,

Julius

Re: Object Authorization ???

Former Member — Mon, 25 Feb 2008 16:07:43 GMT

By default the PA30 will have P_TCODE as an auth object but the "Proposal = NO". When the PA30 is added to a role and the proposal is equals to NO, it will not add the auth object by default. You have to change the "Proposal = YES", if you want it to have P_TCODE defaulted when you add PA30.