RFC-enabled authorization checks for specific tables?

[Former Member]

I am developing an Excel application which calls several BAPIs and RFC-enabled FMs, most notably RFC_READ_TABLE. While I will provide security at the FM level by checking S_RFC for these FMs, I need to find a way of restricting access for users to specific tables based on certain table fields? Is there any SAP-delivered FM/BAPI that will let me do this?

My understanding is that although RFC_READ_TABLE does check S_TABU_DIS, it only checks tables based on their belonging to a particular table class—It is not checking authorization for an individual table. What this means is that users will need to have access to the table class or classes to which the table or tables belong, for any tables that are being read by RFC_READ_TABLE.

Please correct me if I am wrong in my understanding, or if there is a standard solution for a situation like this.

[Former Member]

I am developing an Excel application which calls several BAPIs and RFC-enabled FMs, most notably RFC_READ_TABLE. While I will provide security at the FM level by checking S_RFC for these FMs, I need to find a way of restricting access for users to specific tables based on certain table fields? Is there any SAP-delivered FM/BAPI that will let me do this?

My understanding is that although RFC_READ_TABLE does check S_TABU_DIS, it only checks tables based on their belonging to a particular table class—It is not checking authorization for an individual table. What this means is that users will need to have access to the table class or classes to which the table or tables belong, for any tables that are being read by RFC_READ_TABLE.

Please correct me if I am wrong in my understanding, or if there is a standard solution for a situation like this.

[Former Member]

Hi john,

1. What this means is that users will need to have access to the table class or classes to which the table or tables belong, for any tables that are being read by RFC_READ_TABLE.

U are perfectly right.

2. The users will have to be given rights

NOT TABLE WISE,

But authorisation group wise.

3. Note : S_TABU_DIS

The main purpose of this authorisation object

is for standard tools like sm30 only.

Its also used in the FM RFC_READ_TABLE .

regards,

amit m.