Application Development and Automation Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 
Read only

User has no authorization for query

Former Member
0 Likes
1,363

Hello,

We have a query that users cannot access, even though the InfoSet for the query is assigned to same authorization group that the user is assigned to, in transaction sq02.

The trace for the user shows that it is missing authorization S_PROGRAM for P_GROUP=CMD(the name of the user aut. group) with S_ACTION=SUBMIT. I find that the user is assigned to the CMD group, so we don't know what is the problem.

Can anyone help?

Thanks,

A

4 REPLIES 4
Read only

Former Member
0 Likes
1,024

Hi,

Please regenerate/activate the query and then check if it works...

Ideally when you assign the infoset to the user groups, you need to enter the required users who can access the infoset..

Regards

Shiva

Read only

Former Member
0 Likes
1,024

Regenerating the query didn't help. I noticed that the problem occurs with queries which are assigned to authorization group, and the ones for which the authorization group is None, wotk fine.

Can someone explain to me the difference between authorization group and user group, regarding infosets and queries?

Thanks

A.

Read only

0 Likes
1,024

Hello,

If you are in development system, Try this:

In SQ02: Change InfoSet > Goto Global Properties > Enter in Authorization group

In SQ01: Query > More functions > Generate program

And then run the same query again.

You need to have the authorizations to run the query which have been assigned to the particular authorization group. Get the authorization group added to your role by contacting the SAP security team.

Hope it helps to test the query.

Thanks,

Jayant

Read only

0 Likes
1,024

We were hoping that this could be done without making changes regarding roles, only by assigning the users and infoset to the same user group. But, from what Jayant says, it seems that we can only restrict access using roles, so that is what we will have to do.

Thanks,

A