Authority check

[Former Member]

Hi Experts,

i have created an Authorization object using SU21.

In the object say ZGE_FITEST  I included

Fields SAKNR -> G/L Account Number (value 89000)

and ACTVT  -> show

In the Transaction PFCG i included manually in the Roll of a user this Object

My intention is athat the user is only authorized to see bookings only in this Account

and change no values or see any values on any other accounts

Unfortunately the Authorization check is not working.

Can an body help.

I am very grateful for any help

King

[Former Member]

Hi Experts,

i have created an Authorization object using SU21.

In the object say ZGE_FITEST  I included

Fields SAKNR -> G/L Account Number (value 89000)

and ACTVT  -> show

In the Transaction PFCG i included manually in the Roll of a user this Object

My intention is athat the user is only authorized to see bookings only in this Account

and change no values or see any values on any other accounts

Unfortunately the Authorization check is not working.

Can an body help.

I am very grateful for any help

King

[JL23]

did you add this new authorization object to a transaction? how shall SAP know that this new object  is to be checked?

in SU24 you can assign it to a transaction

[RaymondGiuseppi]

Did you add your own authority-check(s) in some BAdI or validation rule, if no, nothing will happen.

(Some Authority check are implicitaly executed like S_TCODE when calling a transaction, but most must be coded with statement AUTHORITY-CHECK and some FMs)

So you must add your check in some BAdI, Enhancement or rules so the authority-check get performed, also you must code the reaction of the reports and programs, like ignoring or deleting some data, no pain...

Also perform some search on field BEGRU (in tables like KNA1, KNB1, LFA1, LFB1, SKB1, etc.) this field is used in some standard authorization-checks and is an attribute of account numbers.

Regards,

Raymond