RFC Authorizations

[Former Member]

Hi,

I am working on an interface where i need to do some validations, To be precise from CC01/2 transaction user enters values for 3 characteristics and these values need to be validated from an external system, a sql server residing on our company intranet. if these values does not exist in external system for those characteristics, i need to display an error message. But if the user who's entering those values in CC01/2 belongs to the MDM1 level one role with in master data management workflow the error message should not be displayed.

So my doubt here is how can i check the autorization level of the user that he is MDM1 level one or not.

Hope i am clear with my question.

Please send me your responces ASAP, its an urgent requirement for me. Helpful answers will be rewarded with points.

Peice of code will be very helpful to me.

Thanks in advance

Rajesh.

[Former Member]

Why don't you consult your security/basis person to know what authorization object is assigned to MDM1 level and then your program check the authority by CALL AUTHORITY-OBJECT statement (check value of sy-subrc).

[former_member181966]

Hi,

You can do the following things

-Trace the authorization check by tr. ST01

-Run this RFC trace transaction or program to make sure where its failing. ( <b>TR.S_ALR_87101279 RFC Trace</b> )

Moreover, once you’ll get authorization object from either of the above two transaction.

you can see its values in table AGR_1251 . You can also see roles and user in AGR_USERS.

if you’ll find certain users doesn’t have authorization, you can assign authorization to the role in Tr.PFCG .

Also check SU93 for users. ( for missing authorization and object )

You can see different group of authorization report in Tr.SUIM .

Hope this’ll give you idea!!

<b>P.S award the points.</b>

Good luck

Thanks

Saquib Khan

"Some are wise and some are otherwise"