topic Re: AUTHORITY-CHECK for other user in Application Development and Automation Discussions

AUTHORITY-CHECK for other user

Former Member — Thu, 03 Nov 2005 15:12:54 GMT

Hi,

I would need to run an AUTHORITY-CHECK on a certain authority object, but I have to run the AUTHORITY-CHECK not for the currently logged in user, but for a different sap userId. How can I do this?

AUTHORITY-CHECK does not allow you to supply a userId as parameter. Changing sy-uname is probably not possible, and even if it was, this solution would just be too stupid and ugly for me to even try. There must be some simpler/better solution?

The Business Case for this is very simple: In my dialog program the currently logged in user is presented with a form to enter a SAP-userId, and attach a document. The user should only be allowed to post this form, if the supplied userId is authorized to receive this kind of document.

Thanks for any help in advance,

-Hans

Re: AUTHORITY-CHECK for other user

former_member517 — Thu, 03 Nov 2005 15:40:11 GMT

Hi Hans,

I think there are little chances to switch the user context. The only solution I see, is based on batch jobs, which you could run under a different user. But this contradicts a dialog application.

Best regards

Rabanus

Re: AUTHORITY-CHECK for other user

Former Member — Thu, 03 Nov 2005 15:42:33 GMT

Hi Hans,

You can do the posting part in RFC. In the RFC you can pass the user id and checks and all will be executed for that user with which RFC is being accessed.

Thanks,

Anuranjan

Re: AUTHORITY-CHECK for other user

christian_wohlfahrt — Thu, 03 Nov 2005 15:54:48 GMT

Hi Hans!

Sounds like an own authority-check (is there a standard transaction where you can enter the user-id?). Why don't you just add user-id as a field in the authority object?

The test would be, if your user is allowed to send to this user-id, so maintenance might be a little strange.

If it's really own development, then your check is not necessarily going for authority: you might test for a 'customizing' entry in an own table.

Regards,

Christian

Re: AUTHORITY-CHECK for other user

FredericGirod — Thu, 03 Nov 2005 15:56:58 GMT

Hi Hans,

have a look to this function : SUSR_USER_AUTH_FOR_OBJ_GET

Regards

Frédéric

Re: AUTHORITY-CHECK for other user

ramki_maley — Thu, 03 Nov 2005 15:57:21 GMT

Hans,

Please follow the link below to see my answer for an earlier post on the same subject.

Cheers,

Ramki Maley.

Re: AUTHORITY-CHECK for other user

Former Member — Thu, 03 Nov 2005 16:18:05 GMT

Hans,

You can use the function module 'authority_check' to check whether a specific user has authorization for the required authorization object.

Thanks

Giridhar

Re: AUTHORITY-CHECK for other user

Former Member — Mon, 07 Nov 2005 10:07:37 GMT

Hi,

Thanks a lot for all your replies. The FM authority_check seems to be the way to go

-Hans