Finding Authorization object and fields.

[Former Member]

I am implementing autorizations.

I want to find out if there is a method by which it is possible to track the related object for performing an actvity in a tcode.

As suppose there is a "Creat new " button in the tcode. I want to find out the authorization object related to that .

Is it possible to trace authorization objects in such a manner.

I tried using st01 . But no success .

[Former Member]

If it not picked up in the trace then there is, 99% of the time, no check being performed when performing that particular activity

[Former Member]

If the trace does not reach an authority-check, then there are some other options you can try:

- Complete the "create" flow all the way to the end, to check whether there is anything later on.

- Check whether there is some customizing option to activate a certain control (which might be an authority-check). You can sometimes find this in the code, directly ahead of the authority-check which is not reached.

- Debug the button to see what is really going on...

Cheers,

Julius

[Former Member]

why dont SAP device a mehthod that can make taking the authorization object and related field value easy.

Useing trace and debuggers are not ment for this purpose . These are just work around.

It is very tedious seaching all object related to tcode in Tx su24.

Using all this work around done not garentee 100 % results .

Also SAP has very little litrature freely available for implementing authorizations ( articles , blogs , documents, notes ).

TADM940 , TADM950 gives a technical info on the authorization system SAP has developed and how it works.

One more apportunity SAP had to help for this cause was solution manager . Using BBPs it could be very easy for system to generate the autorization matrix and related implementation activies.

SAP did not take it up.

[Former Member]

Hi Hussain,

There is a way of doing this. See SAP note 543164. But it is not the easy way either.

I can understand your frustration though, and sometimes there is no way around it but to look at the program itself, sometimes through the eyes of the debugger.

Cheers,

Julius

[Former Member]

That means you have just su24 and st01 to find authoriation object that you cant figure out .

[Former Member]

You might want to learn how to read abap and go into SE80 for the final answer.

[Former Member]

One more way is to go to the program of the tcode through se93 and search for "Authority-Check" in the code.

[Former Member]

>One more way is to go to the program of the tcode through se93 and search for "Authority-Check" in the code.

Finding authority-check in code is still a crystal maze for me. Please can you explain me how to go about it in transaction se93

[Former Member]

Hello Hussain,

If your intention is to find the objects related to a Tcode which are checked for authority, you can find them from SU24.

else, try this:

se16->table->usobt_c->provide the tcode for the field "NAME"->execute ...

u will get all the list of objects associated with the tcode + their fields etc...

Hope this will help for your requirement...

<removed_by_moderator>

Need further info?

Rgds,

Srihari

Edited by: Julius Bussche on Jun 17, 2008 12:05 PM