Authorisation check without variable.

Hi,
Is it possible to check authorization in the query designer without variable I have got an authorization object on 0Comp_code = TD
If a user create a new query without variable on comp_code is it possible to give him access to the value 0Comp_code = TD.(to filter the data on the authorization value wihout using variable)?
Thanks for your help.

Hi,
I dont think giving an authorization without a variable is possible, since you already have an authorization object for 0COMP_CODE.
If a user creates a query using 0COMP_CODE object without the appropriate variable to filter on, the query would essentially ask the infoprovider for all the data and the infoprovider would refer to the authorisation object associated with it which would return a code "No Authorization" for the user (unless the user in question has an authorization to all values of 0COMP_CODE).
Hope it helps,
Regards,
Nikhil

Similar Messages

Update infotype without authorisation check

Hi, I have a requirement to update an infotype without authorisation check. Please let me know if there is any function module I can use to do that.
Regards,
Lanwu

Hi,
What is the functional requirement?
Because basically it's the same as granting users extended authorization, but without the authorization to execute transaction pa## (except for pa20).
This way, you prevent users from changing their own data. But when they use a program with FM hr_infotype_operations, they pass the checks.
Kind regards, Rob Dielemans

DB Connect: Data displayed without authorisation check

Hallo Guys,
I just set up a DB connect for viewing some data from an Oracle database.
When I want to view 1 table (Source system-> DB-connect->Select database tables -> Display table content), a message is displayed in GREEN 'data is displayed without authorisation check'.
But still I can't see any data!
Anyone a suggestion?
Many thanks
Kurt

Hi,
most likely your table have unsupported field name or data types...
I suggest creating a simple view with field anmes in upper case and char data types and see the data from this view in order to ensure your connection is fine and the user you are using has all privileges to read this table in Oracle....
hope this helps....
Olivier.

Authorisation checks failed

Hi Guys
A Problem has come in picture: I ran su53 and it ended with error for some users.
This all has come in picture after we applied SP to SAP System.
Authorisation check failed
   Object class BC_C Basis - Developement Environemnt
     Authorisation Ojb.S_TransLAT Translation environment ojbect
      Authorisation field ACTVT Activity
                                     02
      Authorisation filed TLANGUAGE Target Language
                                     E
      Authorisation field TRANOBJ Translation : Text type name
Can anyone aware of this error?
Regards
Ricky
Edited by: Ricky kayshap on Oct 14, 2008 4:56 PM

Hi Ricky,
You had said earlier that the SU53 had ended with errors for some users.What i wanted to say is that if you could check for those users if they are missing the authorizations as shown in SU53 in their user profile.
For finding out the same.
Go to SUIM
Roles by complex search criteria
In the field "User" give the user name i.e PASCOAJ
Scroll down to the section "Selection according to authorization values"
Enter the name of the auth. obj in the field "Object 1" i.e S_TRANSLAT
Click on the button "Entry Values" and then in the respective fields below enter the values as per the SU53 error that you are getting.
Then Execute.
If the user PASCOAJ has this authorization avaliable in his user profile then the result would display the name of the roles through which he is getting the access or else it will display at the bottom "no data was selected" which would mean that the user does not have this particular authorization.
You will then have to find out the appropriate roles if existing in your landscape with this authorization which can be assigned to the user without any SOD conflicts.
Thanks,
Saby..

Authorisation checks while calling SAPGUI.

Hi All,
I am analysing the authorisations required to call SAP GUI Script.
Autho obj S_SCR with ACTVT 16, should be present in user's profle to successfully call the SAPGUI Script.
However auth check will only be active sapgui/user_scripting_per_user to TRUE.we have set the parameter to TRUE and were expecting for SAPGUI Script call to fail because of above missing authorisation.
However, as the SAPGUI Script was successfully called without access to S_SCR auth obj.
(Trace shows a check and returns a code RC=12, for obj S_SCR).
Can someone provide me inputs on authorisation checks while calling SAPGUI.

Additional authorization check of S_SCR through parameter : sapgui/user_scripting_per_user is available with below software versions :
SAP GUI for Windows
1- 6.40: Patch 22 and following
2- 7.10 and following
SAP System
1 - 6.40: Kernel 6.40 patch level 159, support package SAPKB64020
2 - 7.00: Kernel 7.00 patch level 87, support package SAPKB70011
3 - 7.10 and following
Just check the version of SAP GUI and let us know.

Authorisation checks fails in FMRP_RFFMEP1AX

Hi,
I've created a role giving access to transaction FMRP_RFFMEP1AX with restrictions on possible values
for funds, budgetgroup, budgetposition.
The authorisation checks succeed for funds and budgetgroup but fail for budgetposition : the report output shows lines which it shouldn't. I'm not an ABAP expert, but could it possible to disable programmatically certain authorisation checks ? How/where can I check this out ?
Kind regards,
Erik

Hi Forhad,
I'm not sure if the error is related to the communication between the Java and the BW or if it's a problem with the authorization.
Are you using a customer exit or an authorization variable in your query/bookmark?
Check if by chance your query have an hirarchy assigned to a characteristic, then, check the user's authorization and check whether you have enough authorization for the hierarchy.
I'm unsure, but maybe note 916090 can help you.
I hope it helps.
Regards,
Daniel

Authorisation Check during CO-Retraction

Hi,
I am retracting CO-Data (CCA and OPA) from BW-BPS to CO. All went well until hierarchy-authorisations for InfoObject 0COSTCENTER have been activated on the planning-cube.
In the planning level/package the selection for InfoObject 0COSTCENTER is 1-ZZZZZZZZZZ.
This value will be delivered for authorisation check during CO-retraction.
When checking hierarchy-authorisations, the explicite value ':' for 0COSTCENTER is expected. So I changed the selection in the planning area to 1-9999999999, ':' and A-ZZZZZZZZZZ.
But the value ':' will be deletet during the preparation for the value check (RSSB_AUTHORITY_VAR_CHECK). So the hierarchy-check does not work properly.
Please give me any advise, how to make authorisation check possible.
Greetings Andreas

Hello Andreas,
as always the BPS selection needs to be a subset of your authorizations. You seem to select all cost centers so a hierarchy authorization is not enough.
- Do an authorization trace in RSSM and check the log
- Adapt the BPS selections or use a BPS authorization variable
Regards,
Marc
SAP NetWeaver RIG

Checking several variables in an If Statement?

Hello!
I've just been searching the internet for some code to check several variables in one big If Statement, I just wanted to double check here whether the code I found is correct!
Is it right to type it like this?
if ((vehicle == "car") && (terrain == "dryroad") && (speed == "20") && (state == "sober")) {
gotoAndPlay("cardryroad20sober");
} else if (( And so on....

Yes, although you do not need to use the inner parentheses (no problem having them though). Inner parentheses can be used when you want to group multiple conditions to be evaluated as a combination in comparison to some other combination or criteria...
if(A && B) || C)...
In that example both A and B have to evaluate true for their combination to evaluate true, whereas C by itself can evaluate true and get the same end result.

OO ALV validation check without event DATA_CHANGED and results via popup

Hi Gurus,
I'm working on SAP ECC 6.0 and I'm facing a problem during the ALV validation check. My requirement is to show an ALV with one editable field. In addition I have to pre-initialize this field in order to give a reference value to the user, but this is not always correct, or better, this field represent the maximum amount available, but, because of other validation checks, this field is not always correct (and it's ok, it's not a problem), and if it is greater than another amount I have to display an error.
I was thinking about catching the event DATA_CHANGED and do the checks inside of it. It works but not completely, because if the user do not change anything the event is not raised and I cannot do my checks.
My solution is to do the checks without catching the DATA_CHANGED event and display the errors in a separate popup window.
The checks are ok, but I have problems during the displaying of the results: I would like to use the class CL_ALV_CHANGED_DATA_PROTOCOL in order to display the errors, I tried creating the Object:
Data: go_Error Type Ref To CL_ALV_CHANGED_DATA_PROTOCOL.
Create Object go_Error
    Exporting
*      i_container =
      i_calling_alv = go_0200_Alv
giving it a reference to the ALV (the go_0200_Alv is my CL_GUI_ALV_GRID object).
Then I did many Call Methods to the Add_Protocol_Entry to add the message in the protocol and then display them calling the Display_Protocol Method of my "go_Error".
The Popup is shown and the "links" to the ALV are correct (if I double click a message it selects the corresponding row of the ALV, but (and it's my problem) I cannot see the Description of the Column with the error: the popup window is an ALV grid itself with 3 columns ("Message Type", "Name of the Column" and "Message Text") where I can see correctly the Message Type and the Message Text but not the name of the column.
Debugging the code I found that If I catch the event, the parameter er_Data_Changed (the class CL_ALV_CHANGED_DATA_PROTOCOL) is filled with some other informations like Modified Rows and other attributes like FieldCatalog, Row-ID, so I thought the problem was related to that, and that's why I replicated the whole case in my processing, filling every table I would see if I use the "standard way" for validation. Bu it didn't correct the error. I still don't see the name of the Column.
This is my code, it's only the part interested, If you need other informations, please ask me and I will copy them.
form CHECK_ALV_0200_0110 Changing pc_Error Type Char01.
Data: lt_MatchK1 Type tp_Matches1_Key_t,
        l_Message Type Char100,
        l_MessX    Type String,
        l_QtaRes   Type ZDM_AMT_ASSIGNED,
        l_QtaAcc   Type ZDM_AMT_ACCRUED,
        l_QtaStep Type ZDM_AMT_ASSIGNED.
Field-Symbols: <fs_Table>    Type Standard Table,
                 <fs_Master>   Type Standard Table,
                 <fs_Mod_Cell> Type LVC_S_MODI,
                 <fs_Line>     Type Any,
                 <fs_Field>    Type Any,
                 <fs_Any>      Type Any.
Data lt_Matches_Alv_Mod Type tp_Matches1_Alv_t.
Data ls_Modi Type LVC_S_MODI.
Data: l_Row_ID Type I,
        l_Tabix Type I.
Field-Symbols: <fs_Match_ALV> Type tp_Matches1_Alv_s.
Free go_Error.
CREATE OBJECT go_Error
    EXPORTING
*      i_container =
      i_calling_alv = go_0200_Alv
* Validation Checks
Clear pc_Error.
Clear ls_Modi.
Loop At gt_Matches1_Alv Assigning <fs_Match_ALV>.
    l_Tabix = Sy-Tabix.
    Check <fs_Match_ALV>-Status Eq con_Status_Temp.
*   Set the Modified Row for the CL_ALV_CHANGED_DATA_PROTOCOL object
      Append <fs_Match_ALV> To lt_Matches_Alv_Mod.
      Add 1 To ls_Modi-Row_Id.
      ls_Modi-FieldName = 'AMT_DEDUCTED'.
      Write <fs_Match_ALV>-Amt_Deducted To ls_Modi-Value Currency <fs_Match_ALV>-Waers.
      Condense ls_Modi-Value No-Gaps.
      ls_Modi-Tabix = l_Tabix.
      Append ls_Modi To: go_Error->mt_Mod_Cells,
                         go_Error->mt_Good_Cells.
      l_Row_ID = ls_Modi-Row_Id.
    Clear l_Message.
    If <fs_Match_ALV>-Amt_Deducted Eq 0.
      pc_Error = con_X.
      CALL METHOD go_Error->Add_Protocol_Entry
        EXPORTING
          i_msgid     = 'ZDMV'
          i_msgty     = 'E'
          i_msgno     = '005'
*          i_msgv1     =
*          i_msgv2     =
*          i_msgv3     =
*          i_msgv4     =
          i_fieldname = 'AMT_DEDUCTED'
          i_row_id    = l_Row_ID
*          i_tabix     =
      Continue.
    EndIf.
    Case g_Dynnr.
      When '0110'.
        Perform Get_ResQtaDispute1 Using lt_MatchK1
                                         <fs_Match_ALV>
                                   Changing l_QtaRes.
        Perform Get_ResQtaAccrued1 Using <fs_Match_ALV>
                                   Changing l_QtaAcc.
*      When '0111'.
*        Perform Get_ResQtaDispute2 Using lt_MatchK2
*                                         <fs_Match_ALV>
*                                   Changing l_QtaRes.
*        Perform Get_ResQtaAccrued2 Using <fs_Match_ALV>
*                                   Changing l_QtaAcc.
    EndCase.
    Add <fs_Match_ALV>-Amt_Deducted To l_QtaStep.
    If l_QtaStep > l_QtaRes.
*     Store the Error
      pc_Error = con_X.
      Write l_QtaRes To l_Message Currency <fs_Match_ALV>-Waers.
      Condense l_Message No-Gaps.
      CALL METHOD go_Error->Add_Protocol_Entry
        EXPORTING
          i_msgid     = 'ZDMV'
          i_msgty     = 'E'
          i_msgno     = '002'
          i_msgv1     = l_Message
*          i_msgv2     =
*          i_msgv3     =
*          i_msgv4     =
          i_fieldname = 'AMT_DEDUCTED'
          i_row_id    = l_Row_ID
*          i_tabix     =
    EndIf.
    If l_QtaStep > l_QtaAcc.
*     Store the Error
      pc_Error = con_X.
      Write l_QtaAcc To l_Message Currency <fs_Match_ALV>-Waers.
      Condense l_Message No-Gaps.
      CALL METHOD go_Error->Add_Protocol_Entry
        EXPORTING
          i_msgid     = 'ZDMV'
          i_msgty     = 'E'
          i_msgno     = '002'
          i_msgv1     = l_Message
*          i_msgv2     =
*          i_msgv3     =
*          i_msgv4     =
          i_fieldname = 'AMT_DEDUCTED'
          i_row_id    = l_Row_ID
*          i_tabix     =
    EndIf.
EndLoop.
If pc_Error Eq con_X.
*   If there was at least one error, Display the Popup
    go_Error->mt_FieldCatalog[]   = gt_0200_FCat[].
    go_Error->ms_Layout-Zebra     = con_X.
    Get Reference Of lt_Matches_Alv_Mod[] Into go_Error->Mp_Mod_Rows.
    CALL METHOD go_error->display_protocol
*      EXPORTING
*        i_container        =
*        i_display_toolbar =
*        i_optimize_columns =
EndIf.
EndForm.
Do you know if there is a particular issue about that? Or, maybe, I'm doing something wrong...
Please help me
Regards,
Claudio
Edited by: Claudio Distrutti on Oct 31, 2008 12:38 PM

Hello Claudio
Nobody prevents you from calling your event handler method go_grid->HANDLE_DATA_CHANGED directly!
What do I mean with that?
I assume you are calling method go_grid->CHECK_CHANGED_DATA at the beginning of the PAI module to catch any changes from the editable ALV grid. Within the event handler method you do your validation and send the error popup if necessary.
Now when the user closes the error popup and pushes e.g. the SAVE button then I can happen that method HANDLE_DATA_CHANGED does not trigger event DATA_CHANGED because nothing was indeed changed on the ALV grid. Yet the invalid value is still there.
However within the FORM routine for saving the data you can just call your event handler method directly:
FORM save_data.
CALL METHOD go_grid->handle_data_changed
    EXPORTING
*      er_data_changed =
      e_ucomm = 'SAVE'.
ENDFORM.
Now within your event handler method you always know when the method was called because if method CHECK_CHANGED_DATA triggers event DATA_CHANGED the IMPORTING parameter ER_DATA_CHANGED is bound whereas it is empty when the method is called from your SAVE routine.
METHOD handle_data_changed.
DATA: lo_log   TYPE REF TO CL_ALV_CHANGED_DATA_PROTOCOL.
    IF ( er_data_changed IS BOUND ).
      lo_log = er_data_changed.
    ELSE.
      CREATE OBJECT lo_log.
    ENDIF.
" Do the validations and send error log if necessary
lo_log->DISPLAY_PROTOCOL( ).
ENDMETHOD.
Regards
Uwe

How to put Authorisation Check?

Hi,
I have built a Module Program. In this there is a Save Button where information in the screen is saved to a Z table.
I need to put an Authorisation check to this save button. That is only users who have Save capability could save.
Simply there should be an authorisation check before the Save where it will check if the User has the Save option.
Please guide me on how to do this.
Thanks,
Kishan

Hi Kishan,
1. AUTHORITY-CHECK
   The above statement is required for authority checking.
    Just see help on it for syntax purpose.
2. Moreover,
   u will also have to know which authorisation object
   is necessary for your purpose.
   (or else new authorisation object may need tobe created)
Hope the above helps.
Regards,
Amit M.

Authorisation check in report

Hi ,
we have developed a z report which is fetching grade from infotype 8 .All the users here dont have authorisation for infotype 8.Is it possible somehow that the users who don have authorisation for infotype 8 can rum that report.Right now when they are trying to run the report its showing 'No Authorisation for infotype 8'.Or is there some other place from which grade can be retrieved .
Regards
Saurabh

Create an authorisation object (SU21)
Put an authorisation check for this object in your report (AUTHORITY-CHECK)
Create a role that contains this object (PFCG)
Assign this role to all the users who require access to the report (SU01).
<REMOVED BY MODERATOR>
Edited by: Alvaro Tejada Galindo on Feb 27, 2008 2:07 PM

Skipping Authorisation checks in LDB

Hi All,
I am working on HR module and I have got to work on a report which is using LDB (Logical DataBase).LDB will do authorisation checks by default.
1) My requirement is to skip the authorisation checks and allow all the data to be retrieved.
Can this be done by calling any standard FM ? If yes , please name it.
regards,
PP

//LDB will do authorisation checks by default.
in my opinion you are looking for a data retrieval process from report development point of view.
Ok say you are pulling data from infotype -08 which is sensitive information. now you need a entry for the object of this and then you are allowed to select on this table.
keep an authority-check on this table pa0008 and if you have the access then you will proceed or else dont pull the records.
Authority-object / Authority -check from program perspective will do .
ex:
AUTHORITY-CHECK OBJECT 'Z_TCODE'
ID 'ACTVT' FIELD '03' " read access
ID 'ZTCODE' FIELD p_tcode. " actual value
IF sy-subrc EQ 0. " check authorization
* fetch record
SELECT SINGLE *
FROM tstc
INTO wa_tstc
WHERE tcode EQ p_tcode.
Br,
Vijay.

User authorisation check in ABAP-HR program

Hi,
Can anyone please help me on the following query ?
I need to check user authorisation in an ABAP report at Object level, filter only relevant records based on the user's authorisation and display appropriate messages.
The above mentioned report is purely developed by us and is not a copy of any standard report. Hence, kindly help me with your suggestions and opinions.
Thanks and Regards,
Manas Menon

Create an authorisation object (SU21)
Put an authorisation check for this object in your report (AUTHORITY-CHECK)
Create a role that contains this object (PFCG)
Assign this role to all the users who require access to the report (SU01).
<REMOVED BY MODERATOR>
Edited by: Alvaro Tejada Galindo on Feb 27, 2008 2:07 PM

Authorisation check for Object F_BL_BANK using transaction F110

Hi
Can you help me with transaction F110. The object F_BL_BANK has been linked on SU24 to transaction F110. It has also been set for Check/maintain.
There is no authorisation check for this object using F110.
How can we resolve the issue.

Hi
We are on 4.6
I linked the object but the program is not doing an authority check The F_BL_BANK object has the following linked to it
. .     . Check          F_BKPF_BUP Accounting Document: Authorization for Posting Periods
. . .     Check/maintain F_BL_BANK Authorization for House Banks and Payment Methods
. .     . Check          F_KNA1_APP Customer: Application Authorization
. .     . Check          F_KNA1_BED Customer: Account Authorization
. .     . Check          F_KNA1_BUK Customer: Authorization for Company Codes
. .     . Check          F_KNA1_GEN Customer: Central Data
. .     . Check          F_KNA1_GRP Customer: Account Group Authorization
. .     . Check          F_LFA1_APP Vendor: Application Authorization
. .     . Check          F_LFA1_BEK Vendor: Account Authorization
. .     . Check          F_LFA1_BUK Vendor: Authorization for Company Codes
. .     . Check          F_LFA1_GEN Vendor: Central Data
. .     . Check          F_LFA1_GRP Vendor: Account Group Authorization
. .     . Check          F_PAYR_BUK Check Management: Action Authorization for Company Codes
. . .     Check/maintain F_REGU_BUK Automatic Payment: Activity Authorization for Company Code
. . .     Check/maintain F_REGU_KOA Automatic Payment: Activity Authorization for Account Type
. .     . Check          PLOG       Personnel Planning
. .     . Check          P_ABAP     HR: Reporting
Ther are more objects but these are the key ones The object also has a custom object in that was build by SAP called ZLSCH      Payment method We want the system to do a check on the payment method

Mov Type - Authorisation Check

Hi Everybody
I want to control my mov types thru the Authorisation check ie Suppose there is a Log in "x" , and I dont want to give hime the Atuthorisation of mov type 551/552 under mb1a Tcode but rest all Mov types can be used by him .
Pls advice how to go ahead for the same
Rgds
Manoj

Manoj,
This can be controlled by std authorisation object check. This will be given by basis in PFCG transaction. The setting in the relevant authorisation object example M_MSEG_BWA has to be provided.
The movement type will appear as one of the parameters while a specific authorisation for a transaction is given. The movement type could be restricted here.
Regards
Ram

Authorisation check without variable.

Similar Messages

Maybe you are looking for