Authorization field restriction

[Former Member]

Hi

I have a object S_WFAR_OBJ. This object has a auth field which is object type (OAOBJEK). I would like users to have access to all except a certain object type.

Is there a way this can be restricted?

- ravi

[Former Member]

If it allows from and to then you could create a range that contains everything but the single object type.

[Former Member]

The entries are alphabets. So I cannot enter a range.

I did wildcard stuff like (A, B) to ensure that it would work with everything except the one which should be excluded. However what I want is something like

ALL EXCEPT a certain object type.

Is there a better way of doing it?

any ideas?

Ravi

[Former Member]

Hi Ravi,

SAP security is additive & doesn't support "everything except nnnn" unfortunately.

The way you have done it is the only way.

[Former Member]

Hi Ravi,

Like Alex rightly said, in SAP we cant configure to deny access to a object, we can only give access to an object.

Regarding your query, cant you just select all objects types under S_WFAR_OBJ, and just de-select the object you dont want to give access to ?