topic Re: HR Security in Application Development and Automation Discussions

HR Security

Former Member — Wed, 27 Feb 2008 11:37:10 GMT

Hi All,

Can you help me understand this.

In SU24 for T-Code PA30 it is auth object P_TCODE is check and not maintained.

So it means when we execute this T-code it will check P_TCODE but since it is not maintained in PFCG where exactly will it check if we are authorised to execute this.

Please explain.

Thanks

Joel

Re: HR Security

Former Member — Wed, 27 Feb 2008 20:54:45 GMT

Hi,

Check/maintained explained:

When defining authorizations using Profile Generator, the table USOBX_C defines which authorization checks should occur within a transaction and which authorization checks should be maintained in the PG. You determine the authorization checks that can be maintained in the PG using Check Indicators. It is a Check Table for Table USOBT_C.

In USOBX_C there are 4 Check Indicators.

CM (Check/Maintain)

- An authority check is carried out against this object.

- The PG creates an authorization for this object and field values are displayed for changing.

- Default values for this authorization can be maintained.

· C (Check)

- An authority check is carried out against this object.

- The PG does not create an authorization for this object, so field values are not displayed.

- No default values can be maintained for this authorization.

· N (No check)

- The authority check against this object is disabled.

- The PG does not create an authorization for this object, so field values are not displayed.

- No default values can be maintained for this authorization.

·U (Unmaintained)

- No check indicator is set.

- An authority check is always carried out against this object.

- The PG does not create an authorization for this object, so field values are not displayed.

- No default values can be maintained for this authorization..

Re: HR Security

Former Member — Thu, 28 Feb 2008 08:29:02 GMT

Hi Ankur

Thanks for you reply i understood that but a quick question if a object say CHECK and NO for maintained for object P_TCODE in SU24 then you mean it checks at transcation level i.e. in the prog if there is an Authrority Check that happens and depending on this access is given for the T-Code.

Joel