Restrict Authorization by profile

[Former Member]

Hi Friends,

This might be a trivial question but i am cripplied with limited access in my box to do trial and error hence asking you.

There is a profile already in use in PRD.

i am now developing a Report assigning a Tcode to the report and want to restrict it for that profile alone.

So adding this Tcode in that profile will suffice ?

or

Do i have to code

Authority-Check Object OBJ
                         ID Name1
                         Field f1.

and check sy-subrc ?

or both?

Any guidence is highly appreciated.

Regards,

Simha

[Former Member]

Hi Friends,

This might be a trivial question but i am cripplied with limited access in my box to do trial and error hence asking you.

There is a profile already in use in PRD.

i am now developing a Report assigning a Tcode to the report and want to restrict it for that profile alone.

So adding this Tcode in that profile will suffice ?

or

Do i have to code

Authority-Check Object OBJ
                         ID Name1
                         Field f1.

and check sy-subrc ?

or both?

Any guidence is highly appreciated.

Regards,

Simha

[Former Member]

adding the Tcode in your profile may solve your problem

~regards

hitesh

[Former Member]

Hi Hitesh,

So adding the Tcode in that profile will restrict other users from accessing it, am i right?

Can you confirm.

Regards,

Simha

[kiran_k8]

Simha,

AUTHORITY-CHECK OBJECT 'ZPLNT'

ID 'WERKS' FIELD P_WERKS.

IF SY-SUBRC NE 0.

message 'Not Authorised' type 'E'.

endif.

K.Kiran.

[Former Member]

Hi Kiran,

Can you pls be more specific as to what you meant?

Do i have to create an Authorization object ?

Regards,

Simha

[kiran_k8]

Simha,

The given code restricts the User based on the profiles added in that particular Authorisation object.Authorisation Object will be created by the Basis team.

For more on this you can search in SDN using the key word "Authorisation Object".

K.Kiran.