SU21

[Former Member]

what is the funcion module created in SU21.

Is this funtion module is comparing checking the authorisation for the value that we pass through our program with the values of authorisation/ roles assigned to that user

[daixiong_jiang3]

SU20---Maintain Authorization Fields

SU21---Maintain Authorization Objects

When we need to do a authority check by ourselves,we should define severial data fields we want to check,this can be done in se11 &SU20, then we consolidate these fields into one authority-check object using SU21,at the same time some permitted values will be defined.

then in the Z* program, we can use the following statement to do an authority-check:

AUTHORITY-CHECK OBJECT 'S_CARRID'

ID 'CARRID' FIELD carr

ID 'ACTVT' FIELD '03'.

IF sy-subrc <> 0.

MESSAGE 'No authorization' TYPE 'E'.

ENDIF.

[Former Member]

i dont have authorisation for accessing the SU20 and SU21 thats why i was asking the funcion module directly to see how the authority-check statement is workin comparing the values passed in the program with the user master data maintained already

[Former Member]

If you think an authorisation failure is happending in a transaction, run the transaction, then run transaction SU53, this will show any failures along with the authorisation object and value which failed.