topic how to Authorisation Object in Application Development and Automation Discussions

how to Authorisation Object

Former Member — Tue, 27 May 2008 08:30:59 GMT

Hi Guys,

In transaction ME51n i want to give authorisation to users based on cost center. how can i do this. do i have to create an authorisation objct for this.

please give me detail step by step way to create authrisation object.

<removed_by_moderator>

Regards,

Quavi

Edited by: Julius Bussche on May 27, 2008 11:10 AM

Re: how to Authorisation Object

Bernhard_SAP — Tue, 27 May 2008 08:51:29 GMT

Hi Abdul

use transactionSU21. Enter an approproate auth.object class (doubleclick) or create an own(create button.

Then in the class press the create button, enter name, text, class, enter required fields (from SU20), create documentaton, possible allowed activites). Save.

Pls do not forget, to enter the object in SU24 after you have added your coding with the additional authority-check....

b.rgds, bernhard

Re: how to Authorisation Object

l_borsboom — Tue, 27 May 2008 09:45:20 GMT

Most imortant: you need to check whether an authorization check (AUTHORITY-CHECK statement in ABAP) on cost centers is built in the ME51N code. You can check this with either transaction S_ALR_87101287 or with report RPR_ABAP_SOURCE_SCAN.

According to my findings no additional checks are built in. You still can look for an appropriate user/customer exit (SMOD/CMOD)

Good luck!

Kind regards,

Lodewijk

Re: how to Authorisation Object

Former Member — Tue, 27 May 2008 09:50:31 GMT

Just to add!!

If you want to create your own Auth object, then follow up the document which shows the steps with screenshots.

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a92195a9-0b01-0010-909c-f330ea4a585c

Rakesh

Re: how to Authorisation Object

l_borsboom — Tue, 27 May 2008 09:55:04 GMT

That's a nice document!

Re: how to Authorisation Object

Former Member — Tue, 27 May 2008 10:21:56 GMT

Hi Lodewijk,

In addition to user/customer exits you can also use enhancement points - these are like user exits on steroids & can be very useful for including additional validations in standard transactions.

Not sure if it applies in this scenario but another option to look into.

Re: how to Authorisation Object

Former Member — Tue, 27 May 2008 11:13:35 GMT

Another aspect to consider is that if there already is an SAP standard auth object with fields which can do the control and is possibly already used in the auth concept to control the access in the same way it is intended to control in the exit or enhancement, then preference should be given to the standard option before creating an own one.

At least that is what we try to do.

Cheers,

Julius