topic Re: Authorization on table columns in Application Development and Automation Discussions

Authorization on table columns

Former Member — Thu, 06 Mar 2008 09:36:02 GMT

Hi gurus,

I have a scenario where I have created a Z table, and am going to generate a maintenance screen & a Z transaction. I also have a requirement that certain users can only view their own product area (product area is a field in the Z table, and the info of which product area a user belongs to is in the user profile).

How could I achieve that?

Thank you!

Re: Authorization on table columns

Former Member — Thu, 06 Mar 2008 10:04:21 GMT

Hi,

You want to add authorization to you z-transaction.would that z-trans be for the table maintainance or for a different program.

if in a program you can use authorization check by using the statement authority-check like

AUTHORITY-CHECK OBJECT object and field

you can created create this object in transaction su21 in any class there then call this object in the program.

The same authorization would have to be added to the user-authorisations in su01. When the user runs the program a select statement will select the product area assigned to the user and then check with the authorisation is sy-subrc = 0 (check successful) let the user work else display a message.

If u are trying to create the tcode for table maintainance you can use authorisation groups but then you might have to create more tahn one transactions.

Regards,

Himanshu

Re: Authorization on table columns

Former Member — Fri, 07 Mar 2008 01:24:41 GMT

In the table maintenance generator screen, write your piece of code in PB0 of the maintenance screen to filter out only those values the user has authorization to or assigned to.

Hope this helps.

Thanks,

Balaji

Re: Authorization on table columns

Former Member — Sun, 09 Mar 2008 04:18:20 GMT

Thanks guys. I will try this out and keep you updated.

Re: Authorization on table columns

Former Member — Mon, 10 Mar 2008 09:19:41 GMT

Hi,

This can be define while defining table maintainance generator in the authorization group.

Regards,

Irfan