‎2007 Feb 21 10:20 AM
Hi,
Which tcode I can use to create an authorization object (in report).
Thanks in advance,
Jana
‎2007 Feb 21 10:28 AM
Hi,
<b>To create authorization Objects</b> , choose Tools --> ABAP Workbench --> Development --> Other tools --> Authorization objects --> Objets
<b>To create authorization fields</b>, choose Tools --> ABAP Workbench --> Development --> Other tools --> Authorization objects --> Fields.
Transaction code is OY20 - Authorizations
Regards
Sudheer
Message was edited by:
Sudheer Junnuthula
‎2007 Feb 21 10:30 AM
Hi Janardhan,
First you need to create Object class in TC SU21(eg.ZCLASS). Once created, you create an Authorization object(ZOBJECT) in this class. Now fill some description for this.
Now you need to include fields in this object. Goto Authorization fields tab and select fields you want to use to check authorization(In this case ZZCUSTTYPE). Once done, save it and generate this. Now you need to use this object(may be in your program or any transaction)
AUTHORITY-CHECK OBJECT 'ZSIMINV'
ID 'ZZCUSTYPE' FIELD 'ABCD'.
Now you need to ask basis security team to create profiles and roles for this Authrization object for only those who are authorized to process. For eg. if you need authorization to process for customer type ABCD(eg.), then you need to have this type included in your user roles and profiles.
check this link out..
http://help.sap.com/saphelp_46c/helpdata/en/52/67167f439b11d1896f0000e8322d00/frameset.htm
Regards,
Priyanka.
‎2007 Feb 21 12:13 PM
Hi,
Tz for Authorization Objects r
su20----> for defineing authorization field ,
su21-----> for authorization class,
su22------> for assignement authorization object.
Regards
Gaurav
‎2008 Jan 12 4:23 PM
This link should explain you in detail:
http://help.sap.com/saphelp_nw70/helpdata/en/52/6712ac439b11d1896f0000e8322d00/frameset.htm
Authorization fields -->SU20.
Authorization Objects --> SU21.
Authorization objects can also be created in the Object Navigator (transaction SE80).
Edited by: Gautam Poddar on Jan 13, 2008 3:10 AM