authorisation object

[Former Member]

Hi everyone,

i need to create a new authorisation field(zzcusttype) and add the field to new authorisation object(zzcusttype).

Could someone tell me how to create a authorisation object.For that object i need to add a field.

many thanks

Kesirahul

[Former Member]

Hi,

check this link out..

http://help.sap.com/saphelp_46c/helpdata/en/52/67167f439b11d1896f0000e8322d00/frameset.htm

Thanks,

Renjith

[Former Member]

Hi,

First you need to create Object class in TC SU21(eg.ZCLASS). Once created, you create an Authorization object(ZOBJECT) in this class. Now fill some description for this.

Now you need to include fields in this object. Goto Authorization fields tab and select fields you want to use to check authorization(In this case ZZCUSTTYPE). Once done, save it and generate this. Now you need to use this object(may be in your program or any transaction)

AUTHORITY-CHECK OBJECT 'ZSIMINV'

ID 'ZZCUSTYPE' FIELD 'ABCD'.

Now you need to ask basis security team to create profiles and roles for this Authrization object for only those who are authorized to process. For eg. if you need authorization to process for customer type ABCD(eg.), then you need to have this type included in your user roles and profiles.

Hope this helps you

Vamsi

[Former Member]

hello everyone,

The authorizations are based for not single but two groups. There are some conditions on which these two groups are presented with a screen ( depending upon authorizations).I have already creted author.object and 2 author.Fields.

But am bit confused about assigning those filds, so tht the authorizations are worked according to givin conditions.

Can some one help.

Regards

Kesi

[Former Member]

Hi everyone,

i need to create an authorisation object 'zobjc' for that i need to add a authorization field 'zcusttype'with values 'Telesales and Custops'. and i need to check the authorisation for the values. can someone provide me with a code.

Authorisation object name - zobjc.

values - telesales

custops

Authorisation field name - zcusttype

Actvt.

Many thanks

Kesi

[Former Member]

Hi,

Then you just need to ask your Basis or security team to create a Role for the users that are to be restricted to access. Then they need to create a Profile for this role and the Profile should contain the values TELESALES and CUSTOPS.

Now you call the auth. object in your program as I said before and pass the value of ZCUSTTYP at runtime(eg: Marketing) to the auth. field. When the Auth. object is executed, the object checks if the profile of the user who is running the program(or transaction) has this value in his profile. If not it fails and SY-SUBRC will not be zero. Now based on SY-SUBRC you can raise appropriate error messages.

Vamsi

[Former Member]

Hi vamsi,

i have created authorisation object(zobj) after that i assigned 2 fields(zzcustype, actvt).i need to assign 2 values(telesales,custops) for the field zzcustype. where should i assign them. could please tell me..

Thanks

kesi

[Former Member]

Hi kesi,

1. PFCG

This is the tcode

for such purpose.

Your basis team shall help u for this.

2. The values we assign to authorisation objects

are ROLE SPECIFIC.

Roles are in turn assigned to users.

regards,

amit m.

[Former Member]

Hello,

Is this what your trying to suggest.

AUTHORITY-CHECK OBJECT 'zobj'

ID 'ZZCUSTYPE' FIELD 'custops'.

Is it correct? if not please let me know how to assign as u said ( code will help!!)

Auth. object = zobj

auth. fields = zzcustype & actvt and

zzcusttype have values 'custops' and telsales.