‎2008 Mar 18 12:51 PM
good day experts...
i just want to ask if is it possible to control table query using authorization?
let see i have a ztable,
if the user displays the data at se16.
he can only access the data based on his authorization.
records which does not satisfy his authorization role will not be displayed.
thanks..
‎2008 Mar 18 12:56 PM
Hi,
Yes you can.By using Authorization objects you can lock the table following by you can restrict the user to view the table.
Reward points if useful.
Regards,
Sankar.
‎2008 Mar 18 1:09 PM
thank you for you reply..
Authorization object in Table maintenance Part?
but my requirement is to limit the access the user...
he can still access the table but he is not allowed to view other records...
let say i have a ztable with field employee and employee group..
user1 is only allowed to display all employees with employee group = 1...then even if he tries to display all the records in the table...he can only view all emloyees with group 1.
‎2008 Mar 18 1:17 PM
Hi,
Transactions like SE16 (and SE11) are generic table display tools and only check the authorisation group for the table. If you want anything more complex you'll need to write your own report and include suitable authorisation checks.
Regards,
Nick
‎2008 Mar 18 1:24 PM
‎2008 Mar 18 12:59 PM
Hi,
You can do it .Use Authorization object for this.
Regards
Sandipan
‎2008 Mar 18 1:01 PM
Yes possible,while doing Table maintence generator we need give values to the authorisation group and object.
Authorization object
Element of the authorization system.
An authorization object groups together up to 10 authorization fields which are checked in AND link.
In the system, authorizations are checked against objects. Authorization objects allow complex checks linked to several conditions of an authorization which allows a user to carry out an action. To run the authorization check successfully, the user has to pass the check for every field contained in the object.
Authorization Group
The authorization group allows extended authorization protection for particular objects. The authorization groups are freely definable. The authorization groups usually occur in authorization objects together with an activity.