‎2008 Jun 25 8:39 PM
Hi Experts,
Thedefinition of the logical database describes "central authorization checks for database accesses".
How the authorization check is performed? How can we give the authorization check to particular LDB? Based on the user we will give the authorization means where should we give the authority checks.
Im little bit confused. Can any one explain me about authorization checks in LDB.
Any links or materials also welcome.
Thanks in advance,
helps will be greatly appreciated.
‎2008 Jun 26 4:16 AM
ldb means logical view of two r more table (hier of table).
t.code is se36 ...if u try to create ldb there system itself will generate coding...u can see the coding there(author check is perfomed by system itself that to u can view there)
‎2008 Jun 25 8:50 PM
Hi Nandini,
Please check this links
http://help.sap.com/saphelp_erp60_sp/helpdata/en/4f/d52815575e11d189270000e8322f96/content.htm
http://help.sap.com/saphelp_erp60_sp/helpdata/en/4f/d52897575e11d189270000e8322f96/content.htm
http://help.sap.com/saphelp_nw70/helpdata/en/9f/db99b435c111d1829f0000e829fbfe/content.htm
Tasks of Logical Databases
Logical databases serve mainly to reuse predefined functionality for reading data from database tables, but they can also be programmed for other tasks. To keep the application logic of application programs free from technical details, logical databases can perform the following tasks:
· Reading the same data for several programs.
The individual programs do not then need to know the exact structure of the relevant database tables (and especially not their foreign key relationships). Instead, they can rely on the logical database to read the database entries in the right order during the GET event.
· Defining the same user interface for several programs.
Logical databases have a built-in selection screen. Therefore, all of the programs that use the logical database have the same user interface.
· Central authorization checks
Authorization checks for central and sensitive data can be programmed centrally in the database to prevent them from being bypassed by simple application programs.
· Improving Performance
If you want to improve response times, logical databases permit you to take a number of measures to achieve this (for example, using joins instead of nested SELECT statements). These become immediately effective in all of the application programs concerned and save you from having to modify their source code.
Authorization Checks in Reporting (PA-APP)
Generally, authorization checks in reporting do not differ from those in the transactions. Since data access in reporting is always of the read type, the system checks for a read authorization; the authorization group must be R or *.
In some situations, you may want to use a simplified authorization check when running reports. The object RPABAP is required for the check as well as the object RPORGIN ; if these authorizations are available, a simpler and faster check is performed.
If the report cannot read certain applicant data due to lack of authorization, data for these persons is not processed at the GET APPLICANT time point. A note appears at the end of the list stating the number of applicants who were skipped due to lack of authorization.
Best regards,
raam
‎2008 Jun 26 4:16 AM
ldb means logical view of two r more table (hier of table).
t.code is se36 ...if u try to create ldb there system itself will generate coding...u can see the coding there(author check is perfomed by system itself that to u can view there)
‎2008 Jun 26 9:33 AM