Authorization Object - Checks

[Former Member]

Hello Experts,

We make use of Authority checks in our applications which require User authorization .

For example Sales application makes use of Standard authorization object 'V_VBAK_VKO' .

AUTHORITY-CHECK OBJECT 'V_VBAK_VKO'

ID 'VKORG' FIELD VBAK-VKORG

ID 'VTWEG' FIELD VBAK-VTWEG

ID 'SPART' FIELD VBAK-SPART

ID 'ACTVT' FIELD DA_ACTVT.

The above check is a combination of Business fields like Sales org(VBAK-VKORG) etc and Type of a Activity (DA_ACTVT)

for example '01' for create and '02' for change .

My requirement is to have pure activity based check .

Can we use the same check without Business fields and have only the Activity type . for example

AUTHORITY-CHECK OBJECT 'ZOBJ'

ID 'ACTVT' FIELD '02'.

Syntactically seems to correct .

Is this a correct usage ?

Thanks and Regards,

Ravish.

[Former Member]

Hi,

Ya u can do do, but its not a good option atleast one field u should maintain in Authorization check.

e.g.

AUTHORITY-CHECK OBJECT 'ZOBJ'
ID 'VKORG' FIELD wa_VBAK-VKORG
ID 'ACTVT' FIELD '02'.

But there is no harm w/o field also u can create.

Regards

Arbind

[Former Member]

Thanks Arbind for the Inputs ,

The reason for this requirement is to avoid Users from Viewing certains Tabs in an application which they are not authorized to , this kind of requirement is not dependent on any Business fields .

[Former Member]

Hi,

Than no need you can go forward.

Kindly close the thread, if the issue is solved.

Regards

Arbind

[ThomasZloch]

I suggest you check both the standard authorization object for the relevant organizational criteria and additionally your custom authorization object in your application.

Make sure that the user roles are maintained accordingly.

Thomas

[SuhaSaha]

>

> The reason for this requirement is to avoid Users from Viewing certains Tabs in an application which they are not authorized to , this kind of requirement is not dependent on any Business fields .

If you say "certain tabs" then i assume the check is dependent on the tab you are trying to access