Customized T code

[sumitdua]

I created a customized t-code for which the restriction needs to be set at company code level. The t-code calls the SAP standard program. For setting the
company code restriction, a new authorization object was created and mapped to t-code. We created company code specific roles and provide required
authorizations but still not able to restrict at company code level. Please provide your inputs.

[Former Member]

is the authorization object being checked in the program, does it show up in the trace.

[sumitdua]

no.. its not included in the program

[Former Member]

Hi SD,

For a standard SAP Program, run the transaction and do an authority trace to find out which authorization objects are touched. You may find the one that gives you what you need. Alternatively, there may be user exits available to add your own authority checks. Please check once.

Regards,

Salil B

[RaymondGiuseppi]

So you added a new authorization ,object to a customer transaction which call a standard program,

The only check you actually added is executed at initial call of transaction (does user get some authority on this object, read SE93 help for the field authorization object) Then the standard program will behave as previously, so if user change company code, no additional check will be performed...

Look for Customer-exit or BAdI in the program, or for implicit enhancement spot available in the PAI of the screen where company code is input, and add your authority-check. You could also try to create transaction variant(s) with company code already provided (or come from a transaction with parameter) an not changeable.

Regards,

Raymond