topic Re: authorization check in Application Development and Automation Discussions

authorization check

Former Member — Thu, 12 Jun 2008 16:11:05 GMT

Hi,

i do Enhancement for BW and my customer tell me that he

wont to check if user have authorization to watch the data.

1. i can do that in Enhancement ?

2. what i have to check ,

i see the code :

AUTHORITY-CHECK OBJECT object

ID name1 FIELD f1

ID name2 FIELD f2

...

ID name10 FIELD f10.

what i have to put in object and what in name1 & and name2....

Regards

Re: authorization check

Former Member — Thu, 12 Jun 2008 16:17:48 GMT

object is the name of the authorization object.

name1, name2, ... are the fields of the authorization object.

f1, f2, ... are possible values for authorization.

The DUMMY parameter indicates that there is no need to verify that field.

If SY-SUBRC = 0 authorized user

If SY-SUBRC <> 0 unauthorized users

Re: authorization check

Former Member — Thu, 12 Jun 2008 16:21:40 GMT

Is there a transaction code associated with the process that you want to do the authority check on?

Re: authorization check

Former Member — Thu, 12 Jun 2008 16:24:14 GMT

Hi Cosmos,

To check the authorization of the user of an ABAP program, use the AUTHORITY-CHECK statement:

AUTHORITY-CHECK OBJECT '<object>'

ID '<name1>' FIELD <f1>

ID '<name2>' FIELD <f2>

.............

ID '<name10>' FIELD <f10>.

SELECT * FROM SPFLI.

AUTHORITY-CHECK OBJECT 'F_SPFLI'

ID 'ACTVT' FIELD '02'

ID 'NAME' FIELD SPFLI-CARRID

ID 'CITY' DUMMY.

IF SY-SUBRC NE 0. EXIT. ENDIF.

ENDSELECT.

If the user has the following authorizations for F_SPFLI:

ACTVT 01-03, NAME AA-LH, CITY none,

and the value of SPFLI-CARRID is not between "AA" and "LH", the authorization check terminates the SELECT loop.

I think you have already gone through this below links:

http://help.sap.com/saphelp_nw04/helpdata/en/9f/dbaccb35c111d1829f0000e829fbfe/content.htm

http://abapprogramming.blogspot.com/2008/03/abap-synteax-for-authority-check.html

http://sap.ionelburlacu.ro/sap0/abap018.htm

Regards

Adil

Re: authorization check

Former Member — Thu, 12 Jun 2008 17:47:13 GMT

Hi Alvaro Giancarl,

thanks,

u think i can do it in user-exit, i have to do it for bw system?

Regards

Re: authorization check

Former Member — Thu, 12 Jun 2008 17:58:25 GMT

Hi Syed Abdul Adil ,

thanks ,

i understand that i have to put object name in :

AUTHORITY-CHECK OBJECT '<object>'

but what i have to put in:

ID '<name1>' FIELD <f1>

ID '<name2>' FIELD <f2> ?

where i can find it?

Best Regards

Re: authorization check

Former Member — Thu, 12 Jun 2008 18:03:34 GMT

Table TSTCA holds the information for transactions.