BAPI for transaction authority check

[Former Member]

Hi,

Is there a BAPI version of AUTHORITY_CHECK_TCODE? I have written an application which calls BAPI_ACC_GL_POSTING_POST but this permits posting even if user has no authorization to the transaction.

It also permits posting to a company code the user has no access to post in SAP.

Thanks.

[Former Member]

Hi,

Is there a BAPI version of AUTHORITY_CHECK_TCODE? I have written an application which calls BAPI_ACC_GL_POSTING_POST but this permits posting even if user has no authorization to the transaction.

It also permits posting to a company code the user has no access to post in SAP.

Thanks.

[former_member194669]

I didn't find any bapi for authority check tcode.

roundway will be

write a wrapper rfc and inside this rfc first call authority check fm then call your bapi .

and call this rfc from your apps.

a®

[Former Member]

hi ,

you can refer to the below thread , i hope this thread will help you out

-Thanks & Regards

Saurabh Goel

[mvoros]

Hi,

I was surprised by your statement that it does not check authorizations because BAPIs usually perform authority checks. Not for transaction codes (object S_TCODE) because that does not make sense. But all other objects are usually checked. I checked code for that BAPI and it really looks like there are no authorization checks. Weird. I found also some other discussion on this forum regarding this problem. So it looks like you have to write your own authorization checks. So you can write a wrapper around BAPI_ACC_GL_POSTING_POST where you will check all required authorization objects at the beginning.

Cheers