Field level authorization in Database Table

[Former Member]

Hi Experts,

We have a DB table used for maintaining expense limit. This table is used in a program. We have a requirement such like any user can enter any value for limit in that table but that limit should be usable only if it gets approval from authorized approvers.

So we are thinking to add a flag field in that table and provide its edit authorization to approvers only. If that flag for record will be 'X' means that is approved.

May i know whether we can provide specifc authorization to edit a particluar field in DB table to only approvers where as other field can be edited by any user ? If yes, please let me know how can i do it ?

All suggestions are welcome.

Thanks & Regards,

Akash

[ThomasZloch]

This can be done on transaction level, by implementing a conditional field status, e.g. set the field to display only if a certain authorization is missing.

Another way would be to move the flag to a separate table with the same primary key and maintain a different authorization group (checked by S_TABU_DIS in SM30 and elsewhere).

It cannot be done purely on DDIC level, as far as I know.

Thomas

[Former Member]

Akash,

As I understood, for your requirement, you can use TMG (Table Maintenance Generator)

At this level, you can do the validation at the time for entering the table fieldsu2026 means try to do the code at PAI of you TMGu2026 so that you can do the validation.

Regards,

Sreenu Valeti

[vinod_vemuru2]

Hi,

How about using TMG events 07 or 25? Not tried. Just try and see if it works for you. Probably we can input enable or disable based on the authorization.

Other option is create a simple editable ALV report/dialog program with table control and make the required columns editable/non-editable based on authorization.

Hope one of the above resolves your issue.

Thanks,

Vinod.