topic Re: Logical data base in Application Development and Automation Discussions

Logical data base

Former Member — Wed, 25 Jun 2008 19:38:46 GMT

Hi Experts,

Thedefinition of the logical database describes "central authorization checks for database accesses".

How the authorization check is performed? How can we give the authorization check to particular LDB? Based on the user we will give the authorization means where should we give the authority checks.

Im little bit confused. Can any one explain me about authorization checks in LDB.

Any links or materials also welcome.

Thanks in advance,

helps will be greatly appreciated.

Re: Logical data base

Former Member — Wed, 25 Jun 2008 19:45:22 GMT

Hi,

when you write the code GET PERNR, then internally it will get the data based on the Auth check and a SET PERNR will be triggers

Thanks

VIkrnaht

Re: Logical data base

Former Member — Fri, 27 Jun 2008 19:40:21 GMT

Hi Nandini,

In LDBs authorization checks are done automaticallly.

Please check this link

Actually, if you're wirting report with PNP LDB, you do NOT need to do this hard-coded auth checking at all. Because the LDB abap code behind PNP has already do this job for you.

So all you need to do is to ask you HR consultant or Basis consultant to modify the authority config of certain ROLE with t-code PFCG, and then assign that ROLE to certain user with t-code SU01.

ABAP code behind PNP will automatically verify the current user according to his ROLE setting.

In some case you do not work with LDB report, then you need to do the authority check by yourself. General function AUTHORITY_CHECK is what you need. AUTHORITY_CHECK do the authority check by means of Authority Object.Belows are authority objects used in HR module(you can also see in PFCG if technial name switched on):

P_ORGIN HR: Master Data

PLOG Personnel Planning

P_PCLX HR: Clusters

P_TCODE HR: Transaction codes

Best regards,

raam

Re: Logical data base

Former Member — Sat, 28 Jun 2008 04:28:17 GMT

hi,

Central Authorization check means that when you use any LDB in Ur Report program then u dont have to explicitly mention all the checks in your program. They have been taken care of while at the time of creation of LDB.

You can open a LDB in the Sytem and check the authorization.

Reward If helpful

Regards

Sumit Agarwal

Re: Logical data base

bpawanchand — Sat, 28 Jun 2008 04:35:55 GMT

Follow the link

http://help.sap.com/saphelp_46c/helpdata/en/9f/db9b5e35c111d1829f0000e829fbfe/content.htm

http://help.sap.com/saphelp_nw70/helpdata/en/9f/db9bb935c111d1829f0000e829fbfe/content.htm

explore the documentation

regards

PAVAN

Re: Logical data base

Former Member — Sat, 28 Jun 2008 10:48:32 GMT

the authorisation for ldb is checked by this function module.

LDB_PROCESS..

if you debugg the ldb you will see the function module..

authority_check in side the ldb ...this is inbuilt...if the use had no authorisation then he cannot perform any action..

Re: Logical data base

Former Member — Sat, 28 Jun 2008 12:22:47 GMT

Hi Nandini

Central authorization checks:

1. Authorization checks can be programmed centrally in the database to prevent them from being bypassed by simple application programs.

2. Authorization checks for central and sensitive data can be programmed centrally in the database to prevent them from being bypassed by simple application programs.

(A) Database program sapdb for logical database is a collection of subroutines, each of which is performed for specific events. For example, subroutine is processed once at the start of the database program. This program can be used to define default values for the selection screen of the LDB.

Other subroutines also exist that are processed during events PBO (Process Before Output) and PAI (Process After Input) of the selection screen. Checks, such as authorization checks (AUTHORITY-CHECK), are usually performed during event PAI.

(B) Some Transaction Codes related to Authorization checks of objects:

SU20 Maintain Authorization Fields (GoTo-> Authorization Fields)

SU21 Maintain Authorization Objects (GoTo-> Authorization Objects)

SU22 Auth. object usage in transactions

SU24 Disables Authorization Checks

Reward points if you find this information usefull.

Regards Harsh.

Edited by: Harsh Dave on Jun 28, 2008 5:53 PM