‎2006 Nov 15 5:17 AM
Team,
I want to add authorization check for a field 8A-BKRS from table GLPCT, which is present on a report painter selection screen. An unauthorized user will be able to see the field in <b>DISPLAY MODE</b> only.
Please suggest.
Regards,
Amey
‎2006 Nov 15 5:41 AM
Hi Amey,
You can create separate transactions & provide authorizations to the respective users based on them.
Once you have done that, then you can check for authorization as under & accordingly make the field as display only or ready for input based on TCODE.
data: l_tstc_tcode like tstc-tcode.
select single tcode
into l_tstc_tcode
from tstc
where pgmna = sy-repid
and dypno = sy-dynnr.
if sy-subrc = 0.
authority-check
object 'S_TCODE'
id 'TCD'
field l_tstc_tcode.
if sy-subrc EQ 0.
<here make field for display only>
else.
<here keep the field for change>
endif.
Regards,
Chetan.
PS:Reward points if you find this helpful.
‎2006 Nov 15 5:41 AM
hi,
after At selction-screen event, check the authorization of user, if it is not authorised user make that field visible = 0.
thanks
Murali
‎2006 Nov 15 11:57 AM
check this .
Definition
Performing a specific action on a set that has a specific authorization group.
Authorizations for this authorization object are checked in the following functions:
Create set (GS01):
To access this function, the user must have create authorization for at least one authorization group.
To assign an authorization group to the set, the user must have create authorization for this authorization group.
To enter a set in a single-dimension set or a multi-dimension set, the user must have display authorization for the authorization group in the entered set.
Change set (GS02):
To access this function, the user must have change authorization for at least one authorization group.
To assign an authorization group to the set, the user must have change authorization for this authorization group.
To enter a set in a single-dimension set or a multi-dimension set, the user must have display authorization for the authorization group in the entered set.
Display set (GS03):
To access this function, the user must have display authorization for at least one authorization group.
To display a set that has an authorization group, the user must have display authorization for this authorization group.
Delete set (GS04):
To access this function, the user must have delete authorization for at least one authorization group.
To delete a set that has an authorization group, the user must have delete authorization for this authorization group.
In order to use a set with an authorization group in the Report Writer and other applications that use sets, the user must have display authorization for this authorization group.
Defined fields
Action from table TACT
01 Create a set
02 Change a set
03 Display a set
06 Delete a set
Authorization group from table TBRG for authorization object G_800S_GSE
Table TBRG is maintained by the customer.
If you temporarily do not want to assign authorization groups to sets, it is recommended to create all authorizations either with authorization group '*' or with any (fictitious) authorization group. All users that have an authorization for authorization object G_800S_GSE then have all authorizations for all sets without an authorization group. Users without any create, change, display, or delete authorization do not have access to the sets without an authorization group because they cannot call up the transactions for creating, changing, displaying, or deleting sets.<b>check tcode SU22 there u will find out objects for Tcodes</b>
regards
Prabhu
null