Tcode SO01

[Former Member]

How can we come to know which Authorization object is necessary for Tcode SO01. If possible tell me steps.

[Former Member]

Hi Sarita,

1.You can find the related authorization objects using SU24 tcode by mentioning the tcode name, the objects which are check/maintained are the objects related to the tcode.

2.Other option would be by using Table USOBT and USOBT_C (SE16 tcode)

3.You can check in SE93, and see what authorization object is being checked from Authority check program.

Rakesh

[Former Member]

Hi,

I would suggest to go for Authorization trace (ST01).

Switch on the trace.

Execute the t-code SO01, do all the changes/viewing which you want to do and analyze the trace file. You will get all the auth objects that are being checked with their respective field values.

Hope this helps,

Cheers,

Hemant

[Former Member]

The trace is good for finding out if that object is actually called / checked while executing but SU24 would be where I would go.

Just a quick point but make sure that you are on the same application server as the user being traced otherwise you will not get great data.

Cheers,

Simon

[Former Member]

I agree with Hermant.

SU24 is a useful indicator wheras ST01 will give actual values checked depending on your use of the transaction.

[Former Member]

Thats correct Alex!

Check/ Check-maintained fields in su24 are of use only if they are checked in the program. ST01 helps in identifying the events which check for the corresponding auth objects. Giving access to auth objects solely on the basis of su24, we may end up giving more accesses than actually required.

Also, many a times, due to security issues, critical auth objects are only checked and not maintained in su24. In that scenario ST01 helps in identifying the actual value that needs to be given for those.

[jurjen_heeck]

>

> I agree with Hermant.  
> 
> SU24 is a useful indicator wheras ST01 will give actual values checked depending on your use of the transaction.

Also nice to know that objects will appear in the ST01 trace (with RC=0) even if they're set to 'do not check' in SU24.

[Former Member]

Good point Jurjen, another reason to stick with the trace!

[Former Member]

Thanks all of you for giving such a quick reply.