authorization data

[juancarlos_tena]

Hello,

I need exclude several data in an authorization object. For example in LGORT the user can access to all except 1000 warehouse.

I saw in any object some such thing with the '*, -1000' but this show an error.

Is it possible to do it? How ?

Thanks a lot.

[Former Member]

Hi

It is not possible to do an exclusion in authorization object. You cam only include values . Probably you will have to incldu all values except 1000.

Cheers

[Former Member]

hi

AUTHORITY-CHECK OBJECT C_AUTH

ID 'ACTVT' FIELD '03'

ID 'WERKS' FIELD DUMMY.

use DUMMY

cheers,

sasi

[juancarlos_tena]

but if I write DUMMY, this means that no check is performed for the field concerned. And I need to check to the same user, he can see all warehouse except two.

thanks

[Former Member]

hi,

in this case you must call it twise

AUTHORITY-CHECK OBJECT C_AUTH

ID 'ACTVT' FIELD C_ACTIVITY

ID 'WERKS' FIELD '001'.

AUTHORITY-CHECK OBJECT C_AUTH

ID 'ACTVT' FIELD C_ACTIVITY

ID 'WERKS' FIELD '002'.

if it is many more you call it inside the loop.

cheers,

sasi

[Former Member]

Hi

I think

or you fill your authorization with all values except those have to be excluded

so

AUTORITY-CHECK

.....

IF SY_SUBRC <> 0. ERROR. ENDIF.

or you create a your custom authorization where you put all values which have to be excluded:

so

AUTORITY-CHECK

.....

IF SY_SUBRC = 0. ERROR. ENDIF.

Max

[pedro_restrepo]

Hi Paloma,

I guess it is not possible to EXCLUDE authorization values.

SAP roles are made via ADDITION of field values.

On the other hand, if the authorization object is "user-made", you can design the field in a way that fullfills your needs (using values with "placeholders" or values that defines possible combinations)

Other method could be to design several roles, each one with only the auth values needed (and whithout any STCODE).

I guess you speak spanish

Por lo que conozco, las autorizaciones operan siempre de forma aditiva, no conozco forma de excluir valores.

La alternativa, si el objeto de autorización es diseñado por Usted, es crear un valor que represente combinaciones o tenga caracteres tipo "comodín".

Si los desea, puede escribirme a mi buzón directamente:

pedrores@tutopia.com

Good luck