topic Re: Delete only own batch-inputs in Application Development and Automation Discussions

Delete only own batch-inputs

maite_egea — Wed, 20 Feb 2008 11:31:39 GMT

Hello,

I am having some problems with batch input authorizations. I want to give users authorizations only to delete the batch-inputs which have been created with their own user. I have seen the object S_BDC_MONI, but this object does not allow me to indicate that the user is only authorized to delete his/her own batch-inputs. Is there an standard authorization object that allows users only to delete their own batch-inputs?

I have also checked the possibility to create my own authorization object, the same as S_BDC_MONI but with a new field where I can indicate that only the own batch-inputs can be deleted. But if I do it will SM37 check this authorization? I don't want to indicate the user in this field, because then I would need a new role for each user. I need a field (similar to PSIGN) where I can say each user can delete only their own batch-inputs.

Any idea?

Thank you very much in advance.

Regards,

Maite

Re: Delete only own batch-inputs

Former Member — Wed, 20 Feb 2008 13:10:20 GMT

there's no solution to your problem, i'm sorry.

S_BDC_MONI only checks the name of the batch-inputs, not the creator or the username with whos authorization it is run.

creating your own object will only work if the calling program (SM35, SM37 ...) does the counterpart of the checking using authority-check. so simply creating an object and adding it to a transaction with SU24 will not work without the coding of the caller being adjusted. of course, this would be a major modification.

all you can do is to adjust your batch-input creating programs to apply those names to the batch-inputs that you can easily cover using S_BDC_moni.

Re: Delete only own batch-inputs

RaymondGiuseppi — Wed, 20 Feb 2008 13:36:41 GMT

There is an authorization object based on APQI-USERID, checked in SM35

 authority-check object 'S_BTCH_NAM'
            id 'BTCUNAME'    field auth_user.

Background user name for authorization check. But i'm not sure it is checked for deletion. (In fact I am convinced to the contrary)

Regards

Re: Delete only own batch-inputs

Former Member — Wed, 20 Feb 2008 13:39:54 GMT

i'm sorry raymond but that object runs on the user with whos authorization the batch input is run (see my post above) this is usually the one executing the program which creates the batch-inputs in the first place ... unless you set it otherwise, but even that would mean adjusting your programs.

Re: Delete only own batch-inputs

RaymondGiuseppi — Wed, 20 Feb 2008 13:43:44 GMT

That confirm my "I am convinced to the contrary". So i fear that without changing the standard program to add a specific authority check, that can not be done.

(FORM loeschen_mappen in SAPMSBDC_CC) but i cannot suggest such a thing

no i cannot

Regards