Function Module to check whether an authorization object is assigned to a u

[Former Member]

Hi All,

Is there a standard Function Module ot check whether a authorization objects is assigned to a User or not.

Thanks

[Former Member]

Hi All,

Is there a standard Function Module ot check whether a authorization objects is assigned to a User or not.

Thanks

[Former Member]

You can do the Authority check for the user in the program -

program an AUTHORITY-CHECK.

AUTHORITY-CHECK OBJECT <authorization object>

ID <authority field 1> FIELD <field value 1>.

ID <authority field 2> FIELD <field value 2>.

...

ID <authority-field n> FIELD <field value n>.

The OBJECT parameter specifies the authorization object.

The ID parameter specifies an authorization field (in the authorization object).

The FIELD parameter specifies a value for the authorization field.

The authorization object and its fields have to be suitable for the transaction. In most cases you will be able to use the existing authorization objects to protect your data. But new developments may require that you define new authorization objects and fields.

http://help.sap.com/saphelp_nw04s/helpdata/en/52/67167f439b11d1896f0000e8322d00/content.htm

[Former Member]

SLS_MISC_AUTHORIZE_USER Get authorization profile for a certain user

FC_USER_AUTHORITY_CHECK

There are several other FM's to check authorization depending on object type:

AUTHORITY_CHECK_DATASET Check Authorization for File Access

AUTHORITY_CHECK_DIAL Authorization Check for Dialog Module

AUTHORITY_CHECK_DOMA Authorization Check for Dictionary Object Domain

AUTHORITY_CHECK_DTEL Authorization Check for Dictionary Object Data Ele

AUTHORITY_CHECK_ENQU Authorization Check for Dictionary Object Lock Obj

AUTHORITY_CHECK_FUGS Authorization Check for Exit Function Group (SAP P

AUTHORITY_CHECK_FUNC Authorization Check for Function Module

AUTHORITY_CHECK_TCODE Authorization Check for Start of a Transaction

[Former Member]

Hi,

As i have to create an authorization object for a transaction( not for any field etc. ) i.e i dont want all users to execute a transaction only specific users who will have this auth object added to there user profile shud be able to run the transaction, in that case do i need to maintain authorization fields in the authorization object or we can do it without it.

if we need to maintain the auth fields what are the permissible values?

[Former Member]

Sibi,

Check the SAP help, it explains stepwise how to proceed to create an Authorization object .

http://help.sap.com/saphelp_nw04s/helpdata/en/52/67167f439b11d1896f0000e8322d00/frameset.htm

ashish

[stanislav_tulovskiy]

GET_AUTH_VALUES   and   SUSR_USER_AUTH_FOR_OBJ_GET .