topic Re: Tcode SO01 in Application Development and Automation Discussions

Tcode SO01

Former Member — Fri, 09 May 2008 23:27:34 GMT

How can we come to know which Authorization object is necessary for Tcode SO01. If possible tell me steps.

Re: Tcode SO01

Former Member — Sat, 10 May 2008 00:35:27 GMT

Hi Sarita,

1.You can find the related authorization objects using SU24 tcode by mentioning the tcode name, the objects which are check/maintained are the objects related to the tcode.

2.Other option would be by using Table USOBT and USOBT_C (SE16 tcode)

3.You can check in SE93, and see what authorization object is being checked from Authority check program.

Rakesh

Re: Tcode SO01

Former Member — Sat, 10 May 2008 08:27:02 GMT

Hi,

I would suggest to go for Authorization trace (ST01).

Switch on the trace.

Execute the t-code SO01, do all the changes/viewing which you want to do and analyze the trace file. You will get all the auth objects that are being checked with their respective field values.

Hope this helps,

Cheers,

Hemant

Re: Tcode SO01

Former Member — Mon, 12 May 2008 08:47:50 GMT

The trace is good for finding out if that object is actually called / checked while executing but SU24 would be where I would go.

Just a quick point but make sure that you are on the same application server as the user being traced otherwise you will not get great data.

Cheers,

Simon

Re: Tcode SO01

Former Member — Mon, 12 May 2008 08:53:24 GMT

I agree with Hermant.

SU24 is a useful indicator wheras ST01 will give actual values checked depending on your use of the transaction.

Re: Tcode SO01

Former Member — Mon, 12 May 2008 10:30:06 GMT

Thats correct Alex!

Check/ Check-maintained fields in su24 are of use only if they are checked in the program. ST01 helps in identifying the events which check for the corresponding auth objects. Giving access to auth objects solely on the basis of su24, we may end up giving more accesses than actually required.

Also, many a times, due to security issues, critical auth objects are only checked and not maintained in su24. In that scenario ST01 helps in identifying the actual value that needs to be given for those.

Re: Tcode SO01

jurjen_heeck — Mon, 12 May 2008 10:56:57 GMT


> I agree with Hermant.  
> 
> SU24 is a useful indicator wheras ST01 will give actual values checked depending on your use of the transaction.

Also nice to know that objects will appear in the ST01 trace (with RC=0) even if they're set to 'do not check' in SU24.

Re: Tcode SO01

Former Member — Mon, 12 May 2008 10:59:38 GMT

Good point Jurjen, another reason to stick with the trace!

Re: Tcode SO01

Former Member — Mon, 12 May 2008 11:59:52 GMT

Thanks all of you for giving such a quick reply.