Restricting Authorization to Tables

[Former Member]

We have a requirement in our project where we need to provide authorization checks for Tables. For example, a member of one organizational unit of the company ( say Sales Division ) should be allowed to edit or view only the tables and fields for which they are given authorization. They should not be allowed to edit tables containing data of other divisions ( say HR ).

We need to come up with the possible solutions for the client. So i would like to know in what ways the above requirement can be fullfilled.

So far we have thought of using the help of Basis members to assign roles and create Z-transactions. But for this we need full access. So if there are any other ways or better ways of doing this please let me know asap.

Points will be awarded.

[Former Member]

We have a requirement in our project where we need to provide authorization checks for Tables. For example, a member of one organizational unit of the company ( say Sales Division ) should be allowed to edit or view only the tables and fields for which they are given authorization. They should not be allowed to edit tables containing data of other divisions ( say HR ).

We need to come up with the possible solutions for the client. So i would like to know in what ways the above requirement can be fullfilled.

So far we have thought of using the help of Basis members to assign roles and create Z-transactions. But for this we need full access. So if there are any other ways or better ways of doing this please let me know asap.

Points will be awarded.

[Former Member]

Hi,

Try to create a authorization object using the t-code Su21 , this might solve ur problem.

regards,

Santosh

[Former Member]

Hi,

Thanks for the response. But we need to also restrict specific fields in the tables rather than the entire table. So if there is any way to do this pleasde let me know .

Thank you.

[Former Member]

Hi,

U can do this type of scenario by using Enhancements.

Create a screen for entering userid and password.

Assign username for eg, SDxxxxx for sales persons, HRxxxxx for HR persons...

For corresponding usernames assign corresponding fields t obe changed and disable the non related fields.

Pls reward uif helpful.

[Former Member]

Hi,

We had a similar requirement and implemented the same using the Events section of the table maintenance generator.

the authority-check can be done at the events like:

Before create

Before delete

before save etc.

https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/abap/how%20to%20im...

Hope this helps you.

Regards,

Anjali

[Former Member]

full requirement not fullfilled