problem with authorization

[Former Member]

A test user id has been created which has been assigned a role with one of authorization objects as F_BKPF_BUP having field T001B-BRGRU = 0002.

We have the following code in our program

AUTHORITY-CHECK OBJECT 'F_BKPF_BUP'

ID 'BRGRU' FIELD '0001'.

The above code returns Sy-SUBRC = 0 when we execute the program with the above test user, even though the auth object has field BRGRU with value 0002 for the user. Ideally the above code should return sy-subrc not equal to 0 as the user is not authorized.

Does any one know where can the problem be and why the authorization check is not working?

Regards,

Simmi

[Former Member]

The auth object has field <b>BRGRU with value 0002</b> for the user, but u are checking <b>for 0001</b>. Then any way it will return sy-subrc NE 0.

check whether the object is correct and it may also hold '0002'.

What value sy-subrc is returning.

[Former Member]

Please check it in SU53.

[Former Member]

Hi Judith,

My problem is the code is returning SY_SUBRC = 0 while it should return sy-subrc not equal 0. I am stuck up as to why it is returning sy-subrc = 0 though the user is not authorized for 0001.

[Former Member]

Have you checked whether they have maintained any other values?

[Former Member]

It could be that this user also has other roles attached which has authorization for 0002 as well. Did you check all the roles attached to this user.

Hope this is useful.

[Former Member]

Hi Simmi,

Could u plz clarify one thing. r u login with the new user id that u created for testing or u loged on with u r user id.?

If u loged on with u r user id, lets check the field for u r user.

Regards,

Sunil

[Former Member]

Sunil, I am using the new test user id for testing.

Gururaj, there is only one role created for this user, but there are many auth objects under this role out of which F_BKPF_BUP is one of them with value BRGRU value 0002. But since I am specifying the authorization object this should not matter.

[Former Member]

the syntax written is wrong here.

AUTHORITY-CHECK OBJECT 'F_BKPF_BUP'

ID 'BRGRU' FIELD '0001'.

it should be

AUTHORITY-CHECK OBJECT 'F_BKPF_BUP'

ID 'BRGRU' <b>VALUE</b> '0001'.

check this way and it should work properly...We have implemented in our project and it is working fine.

[Former Member]

Ramesh, it's giving syntax error stating " FIELD expected after BRGRU ".