HRBAS00_GET_PROFL Authorization Check

[Former Member]

Hi Experts,

We have implemented HRBAS00_GET_PROFL to automate profiles assignment as well as to improve the system performance. However, I'm not really sure how the BAdI performs the authorization checking and ppreciate if you could provide clarification on the following matters:

1) If the above-said BAdI is used, does values populated in T77UA and T77UU matters?

I was made to understand that T77UU and RHBAUS00 were created to improve performance and the system accesses the index table instead of the structures. In this case, reindex is required if the structure changed. If T77UU is not in used, it should work immediately without RHBAUS00.

2) If the above understanding is correct, does it mean RHBAUS02, (ii) RHBAUS01 and (iii) RHBAUS00 execution to reindex the structure is no longer required?

3) Can we use transaction HRAUTH to troubleshoot in this case?

Million thanks and best regards.

[Former Member]

Hi Experts,

We have implemented HRBAS00_GET_PROFL to automate profiles assignment as well as to improve the system performance. However, I'm not really sure how the BAdI performs the authorization checking and ppreciate if you could provide clarification on the following matters:

1) If the above-said BAdI is used, does values populated in T77UA and T77UU matters?

I was made to understand that T77UU and RHBAUS00 were created to improve performance and the system accesses the index table instead of the structures. In this case, reindex is required if the structure changed. If T77UU is not in used, it should work immediately without RHBAUS00.

2) If the above understanding is correct, does it mean RHBAUS02, (ii) RHBAUS01 and (iii) RHBAUS00 execution to reindex the structure is no longer required?

3) Can we use transaction HRAUTH to troubleshoot in this case?

Million thanks and best regards.

[mvoros]

Hi,

1) depends on your implementation. If you set exporting parameter OUT_FLAG to 'X' then records in T77UA will be ignored.

2) You still need to run it. It does not matter what strategy for user profile determination you use (T77UA, BADI or both). You still want to update your indexes.

3) Yep, you should be able to do it (note 1600760 mentions that BADI)

Cheers

[Former Member]

Hi Martin,

Thanks for your prompt feedback. I would like to seek your clarification on item 2: If the said BAdI implemented and T77UA is not in used, do I still need to execute all 3 indexing programs or RHBAUS00 alone should be sufficient. Appreciate you confirmation in this matter for me to have a better idea.

Thanks very much.

[Former Member]

Hi,

Yes, you still need to run RHBAUS02, RHBAUS01 RHBAUS00 and in sequence.

[Former Member]

Hi Deb,

Just to share, it seems work without running the indexing programs after BAdI implemented. Not really sure how it works, perhaps the BAdi successfully pass the required profile value for structural restriction. Appreciate if you could share any relevant documentation on this matter.

Best Regards.

[Former Member]

Hi,

Interesting to know you can bypass RHBAUS jobs by implementing a BADI. Do you want some documentation on this BADI or RHBAUS jobs?

[timmybecker]

Hi,

I've changed to context sensitive authorization and implemented Badi RHBAS00_GET_PROFL. But running RHBAUS02 ist not giving a result. T77UU is empty. RHBAUS gives no results. And RHBAUS00 also does not regenerate anything.

The profiles that are not maintained in the roles are not considered in the RHBAUS* programs. In that case running RHBAUS02, 01  and 00 does not have any effect.

It seems Badi it not correctly used. Do you have an idea?

Thanks.