Check authorization at TCode Z...

[Former Member]

Hi All,

I have a problem with authorization, please help me !

I have Tcode for customize report (HR). With user A, for one or two standart tcode, he has aut with Per. Area (10,20,30), but in cust. tcode Z... , he has only one aut in Per. Area (20). I used SU24 to assign aut. object (P_ORGIN) to Tcode Z... to check Personal Area and assign to it P.Area(20). But it not effect. How to do it ! Thanks for all idea !

[eduardo_hinojosa]

Hi

Add the auth.object in your coding. Use 'Pattern' in ABAP Editor (SE38) for 'AUTHORITY CHECK'. After manage the error message with the purpose that user know that he or she must run tcode SU53.

Regards

Eduardo

Edited by: E_Hinojosa on Nov 22, 2011 9:20 AM

[Former Member]

Hi E_Hinojosa ,

No message error, so SU53 show nothing .......

thanks for yr answer !

[SuhaSaha]

Hello,

You need to add the auth. object to relevant authorization role(s), assign this role to the user. After these steps are complete run the report!

I'll advise take help of the Security team.

BR,

Suhas

[Former Member]

Hi ,

You should write AUTHORITY CHECK statement in you code.Then as per personal area restrict the authorization.

[Former Member]

Yes, in the program I did.

AT SELECTION-SCREEN.
  AUTHORITY-CHECK OBJECT 'P_ORGIN'
  ID 'PERSA' FIELD pnpwerks-low
  ID 'PERSK' FIELD pnppersk-low.

  IF sy-subrc <> 0.
    MESSAGE 'Un authorization !' TYPE 'E'.
  ENDIF.

But it also pass