Authorisation object on plant

My requirement is:
The user of a particular plant should be able to get the dispatch details for that Plant only.
Use the Authorization object .
The filed WERKS is not used anywhere else in the list expect for select options.

Hi
*& Form sub_check_auth_iwerk *
This form checks authorization for plant. *
FORM sub_check_auth_iwerk .
--Constant for t code, no tcode hence value = '' (all)
CONSTANTS: lc_tcd LIKE tstc-tcode VALUE '*'.
*--Table for all the plants in selection screen. This
table will be used for authority check.
DATA: BEGIN OF li_plant OCCURS 0,
iwerk LIKE t001w-werks,
END OF li_plant.
*--Select query to pick plant from table t001w
SELECT werks "Plant
INTO TABLE li_plant
FROM t001w
WHERE werks IN s_iwerk.
LOOP AT li_plant.
AUTHORITY-CHECK OBJECT 'I_SWERK'
ID 'TCD' FIELD lc_tcd
ID 'SWERK' FIELD li_plant-iwerk.
*--Check SUBRC
IF sy-subrc NE 0.
*--No Authorization for Plant
MESSAGE e016 WITH li_plant-iwerk.
ENDIF.
ENDLOOP. "loop at li_plant
ENDFORM. "sub_check_auth_iwerk
Try this link also:
http://help.sap.com/saphelp_47x200/helpdata/en/52/67167f439b11d1896f0000e8322d00/frameset.htm
http://help.sap.com/saphelp_erp2005/helpdata/en/ef/4aba3b3bf00152e10000000a114084/frameset.htm
go through this link hope this would help you to give the idea about authorization object,
http://help.sap.com/saphelp_nw04s/helpdata/en/9f/dbaccb35c111d1829f0000e829fbfe/content.htm
http://help.sap.com/saphelp_nw04s/helpdata/en/9f/dbacbe35c111d1829f0000e829fbfe/content.htm
http://www.guidancetech.com/people/holland/sap/abap/
Regards
Neha

Similar Messages

Authorisation-object for Plant-WERKS in SD

Hi Experts,
Am working on a report for SD / OTC module.
We have PLANT-WERKS field in the selection screen, so, I have to cross-check user authentication for PLANT-WERKS level, so, when I checked the SU20 and SU21, I saw the below 2 objects,
1) 'M_RECH_WRK' (Invoices: Plant - Materials Management - Invoice Verification class)"
2) 'M_EINF_WRK' (Plant in Purchasing Info Record - Materials Management: Purchasing)
But, seems they are for MM module, pls. let me know Wht is the PLANT-WERKS authentication object for SD / OTC module?
Thank you

I don't think there are any SD based authorization objects exclusively for Plant. Table TOBJ defines auth objects and contains *_WRK entries only for MM, PP and WG modules. Listing all the SD objects in TOBJ, only the V_ECCN auth object includes the Plant in the fields checked, but it also checks another field and I'm not sure where it is checked, so it may or may not be useful to you. You might need to create a custom authorization object.
.. Craig

Need Authorisation Object: CO88 on plant code

Hi
Need to restrict C088 transaction code on user's plant code, can any one let me know the authorisation object for the same
Thanks a lot
Edited by: Julius Bussche on Aug 27, 2009 9:24 AM
Please use meaningfull subject titles

There are four Objects for CO class(as of 4.6C, my bad I'm still in old version),as CO88 belongs to CO.
K_CKBOB
K_ML_MGV
K_PKSA
K_WIP
You can choose either of these. As a test if you wanna try creating a test role only for CO88, then add any object in SU24 & maintain(Check/maintain) its Check ID, it should work only for the Plant you choose in the test role.
Regards
Puneeth

Authority-Check Object for PLANT(WERKS)?

Hi Experts,
By using "V_VBAK_VKO" Authority Object am checking the user Authentication against the sales area(Sales OrgDistr. ChannelDivision) in my custom report. Below is the code,
AUTHORITY-CHECK OBJECT 'V_VBAK_VKO'
    ID 'VKORG' FIELD s_vkorg
    ID 'VTWEG' FIELD s_vtweg
    ID 'SPART' FIELD s_spart
    ID 'ACTVT' FIELD '01'
    ID 'ACTVT' FIELD '02'.
(Note: My report is for SD/OTC module)
I also need to check the authenmtication of user against entered PLANT (WERKS) in selection screen, so, pls. let me know that What is the Authority-Check Object for PLANT(WERKS)
Thank you

Hi,
Transaction SU20, search for WERKS.
When you find it, double click on the row, in the bottom half of the resulting screen there is a list of authorisation objects that contain the field.
Unfortunately, you can't navigate from this list into the definition of the objects, so you'll need to cross-reference against transaction SU21.
Regards,
Nick

Authorisation object on table

Hi,
I have a z table with table maintenance generator in which company code, plant, storage location , material, quantity are the fields.
Now i want to provide the authorisation object on the table using the companycode field.How can i do this?

the table maintenance generator will have created a function group with the name of the table (default). go to SE56 (name of the table -> display) click on button Fn.Gr.Text, next button Main program -> in the bottom part of that function group you will find a section named
User-defined Include-files (if necessary). *
you can code your authority check there ...

Authorisation object for inspection type

Dear QM consultants,
We are developing one Z program where plant, inspection lot origin and inspection type are main input fields. We want to add authorisation object based on these inputs. I checked for M_BEST_WRK for plant and Q_INSPTYPE for inspection type. Object for plant is working fine but we are unable to restrict based on inspection type since Q_INSPTYPE does not have any activity field associated with it.
Has anybody come across such issue? Whether objects taken by me are correct, if not can anybody guide me what are the authorisation objects to be taken.
Thanks in advance.
Best Regards,
Anand Rao

Hi
Create your own autherization group with SU21
This will bring better control
Regards
Sujit

Authorisation Objects in SAP PM

Hi,
    I am in need of Authorisation Objects for SAP PM. Kindly let me know.
Regards,
Maheswaran.

hi
check this
I_ILOA     Change location- and accounting data in the order
I_CCM_ACT Configuration Control authorization object
I_ALM_ME   Mobile Asset Management
I_VORG_MEL PM/QM: Business Operation for Notifications
I_QMEL     PM/QM: Notification Types
I_BEGRP    PM: Authorization Group
I_BETRVORG PM: Business Operation
I_VORG_MP PM: Business Operation for Maintenance Planning
I_VORG_ORD PM: Business Operation for Orders
I_KOSTL    PM: Cost Centers
I_INGRP    PM: Maintenance Planner Group
I_IWERK    PM: Maintenance Planning Plant
I_SWERK    PM: Maintenance Plant
I_AUART    PM: Order Type
I_SOGEN    PM: Permit
I_ROUT     PM: Task List
I_ROUT1    PM: Task Lists by PM Planning Plant, Work Scheduler, Status
I_TCODE    PM: Transaction Code
I_CCM_STRC Structure gap maintenance authority
I_WPS_MEB WPS: Maintenance Event Builder
I_WPS_REV WPS: Revision authorization object
you can get this from SU21 select the required module and you will have these objects

How to find out Authorization Object for Plant

Hi,
I have to implement an Authorization check for Plant in My Report Program.
Is there any transaction which can help me to find out Authorization Object for any field like Material and plant?
Thanks,
Mamta

Using SU21 u can create Authorisation Object.
The ABAP command AUTHORITY-CHECK is used for performing authorizaton checks in programs.
check f1 help on AUTHORITY-CHECK for the syntax.
check these links
link:[http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a92195a9-0b01-0010-909c-f330ea4a585c;jsessionid=(J2EE3417500)ID1605942050DB11298929682009193279End]

Relationship between Authorisation objects and Tcode

Dear all, 
In 4.6C 
I go to Tcode SU01-> Tcode assignment->provide MB1A for tcode->F8-> value list, then I get the list of Authorization objects associated to this tcode.
Access to Tasks in General Notifications
Authorization for document activities
CS BOM Authorizations
Authorization for Class Types
Consolidation: Authorization for subgroup
PM: Task List
PM: Transaction Code
CO-CCA: Cost Center Planning
EC-PCA: Delete transaction data
EC-PCA: Actual Data Transfer
Warehouse Number / Storage Type
Transaction Codes in the Warehouse Management System
Document Type in Purchase Requisition
Purchasing Group in Purchase Requisition
Plant in Purchase Requisition
Purchasing Organization in Purchase Order
Evaluation Structure: Application
Material Master: Maintenance Statuses
Personnel Planning
HR: Reporting
HR: Master Data
HR: Master Data - Extended Check
HR: Master Data - Personnel Number Check
Use of Group Codes
Quality Notification Types
QM Transaction Authorization
Business Process Quality Notifications
System Authorizations
ALV Standard Layout
Background Processing: Background Administrator
Background Processing: Operations on Background Jobs
Administration Functions in the Change and Transport System
C Calls in ABAP Programs
Authorization for File Access
ABAP Workbench
SE61 Documentation Maintenance Authorization
Authorization for GUI activities
IMG: Authorization to Perform Functions in IMG
Language administration
SAPoffice: Authorization for an Activity with Documents
SAPoffice: Attribute of Office User
Authorization Object for Sending
OLE Calls from ABAP Programs
ABAP: Program run checks
IMG: New Authorizations for Projects
Authorization check for RFC access
Change documents
Spool: Device authorizations
Spool: Restriction on Maximum Number of Pages
Cross-client Table Maintenance
Table Maintenance (via standard tools such as SM30)
Authorization Check for Transaction Start
Transport Organizer
SAP ArchiveLink: Authorizations for access to documents
Sales Document: Authorization for Sales Document Types
Sales Document: Authorization for Sales Areas
This information is fetched from the table USOBX where name = MB1A and type = 'TR'
When I create a role in PFCG say ZTEST_ROLE and assign the only one tcode MB1A, I get additional authorisation objects below
CO-PC: Product Costing
Material Master: Company Codes
Material Master: Warehouse Numbers
Why do I get these additional objects ? What is the logic behind this?
My requirement is to check the authorisation objects associated to a Tcode.
Thankyou.

hi
there would be many authorisation objects for a tcode (like create,change display).....so if user is having that particular authorisation object only then he can do a particular activity in that tcode.
Regards
Sajid

SRM 7.0: Authorisation object? Aliases for services in java portal?

Here's how we did in old SRM 5.0 system (the old and working scenaio):
In SRM 5.0 we employed S_ICF object to determine, whether a particular user who has just logged in to a system via web using a particular alias - is authorised to use this service.
We want external and internal users to use different ways to get into system. We have two aliases:
for internal users: http://srm5.domain.com/srmint
for external users: http://srm5.domain.com/srmext
We make aliases using transaction SICF:
/srmext
/srmint
to service /default_host/sap/bc/gui/sap/its/bbpstart
For alias /srmext we set field SAP Authoriz. = EXT.
For alias /srmint we set field SAP Authoriz. = INT.
We make 2 roles, both containing just a S_ICF auth object with differend values of field ICF_VALUE, an appropriate role to a user. If a particular user logs in to the system using an alias matching to the authorization value set in his role, he gets in, otherwise he gets an error upon logon. So that his logon is only successful if he used the right alias in URL (provided correct login name and password of course).
Question. How do we apply similar scenario in new SRM7?
Is there an authorisation object for java portal in SRM 7.0 - similar to S_ICF object for ABAP portal in SRM 5.0?
Is it possible and how to make an aliases to java portal, or otherwise automatically detrermine at runtime upon logon, which way (which URL or using some parameter in address line) the user has logged in?

This question has been answered by the following blog:
/people/ulli.hoffmann2/blog/2009/10/07/srm-70-running-it-without-the-portal

Populating a authorisation object at runtime...

Hi,
how to populate a authorisation object at runtime? is it possible to have a variable etc that can be populated a runtime?
I have a object zsales_off which has different values for different users. i need to create separate roles just to have different values for sales office for different users. i would like to avoid this by having a single role with the zsales_off getting populated at runtime.
Details steps with code will be appreciated.
thank you.

Hello AHP,
i am not still very clear about the detailed steps to be carried out as i am a novice in abap.
i have created the authorisation variable and am using it in the query. if i manually assign values for sales office in the role, it is working fine.
i want to assign values at run time. i am confused with the process as such.
few doubts like:
1> the variable should be of "authorisation" processing type or "customer exit" processing type.
2>what to use I_step=0 or I_step =1? how to use? where to use?
3>to write a abap code or use a func module, which one? how to use.
any example(like in my case different sales office values for diffrent users) with DETAILED STEPS & CODE would be appreciated.
also i need to have multiple single values for each user(but not interval).
Please help.

Authorisation object for "PO text in the material master"

Hi,
My requirement is as below:
"All users can see the Purchase Order Text as usual, but only a few users should be allowed to create / change the PO Long Text.
For other users, the same should appear in display mode only (both in creation & in change mode, MM01 & MM02)."
Please let me know, How to map this.
As per my knowledge thsi is possible only thru authorisation. But I want to know what is the authorisation object for "PO text in the material master" (Pl note that only for PO text in the material master field). we want control on "PO text of material master"
Regards.
Chinna

Hi,
The authorisation object is "M_MATE_MAT", pl check
Regards
Merwyn

Authorisation object for Supplier field in Shopping Cart

Hi Team,
In Shopping Cart Source of Supply tab field Supplier is not getting displayed as it in hidden for some users, sor those users an authorisation object has to be provided to display the Supplier field.
Can you please Suggest me the authorisation object to be used to display Supplier field in Source of Supply tab of Shopping Cart.
Thanks & Regards,
Goutam Kolluru.

Question is solved.
Answer can be find in bellow link
Field Supplier is not displaying in Shopping Cart with Std Roles SRM 7.0

Authorization object for plant on selection-screen

Hi All,
I need to cehck the authorization object for plant on sleection screen..the palnt is select-options.
I have written the code
Declaration of local constants.
CONSTANTS : lc_i(1) TYPE c VALUE 'I',
              lc_eq(2) TYPE c VALUE 'EQ'.
REFRESH : r_werks.
LOOP AT s_werks.
    IF s_werks-low IS NOT INITIAL.
      AUTHORITY-CHECK OBJECT 'M_MATE_WRK'                "Check if the user has autorization for the plant.
                           ID 'ACTVT' FIELD '03'
                           ID 'WERKS' FIELD s_werks-low.
      IF sy-subrc NE 0.
        r_werks-sign   = lc_i.
        r_werks-option = lc_eq.
        r_werks-low    = s_werks-low.
        APPEND r_werks.
      ENDIF.
    ENDIF.
ENDLOOP.
LOOP AT s_werks.
    IF s_werks-high IS NOT INITIAL.
      AUTHORITY-CHECK OBJECT 'M_MATE_WRK'                "Check if the user has autorization for the plant.
                           ID 'ACTVT' FIELD '03'
                           ID 'WERKS' FIELD s_werks-high.
      IF sy-subrc NE 0.
        r_werks-sign   = lc_i.
        r_werks-option = lc_eq.
        r_werks-low    = s_werks-high.
        APPEND r_werks.
      ENDIF.
    ENDIF.
ENDLOOP.
My doubt is will the authorization will check the plants in between 1001 and 2001..suppose i have pplants 1001,1002,1003,1004,2001..Now will the above code will check for all the plants or only 1001 and 2001 if i specify in the select-options.
Regards,
raj

Hi Raj
First no need to LOOP AT s_werks and check s_werks-high as it will always be present only once in the table s_werks.
Do this
SELECT werks FROM t001w INTO li_werks
WHERE werks IN s_werks.
LOOP AT li_werks.
*check your authority thing here and fill the range
ENDLOOP.
Pushpraj

Authorisation object F_T011 not linked correctly to authorization

Hello Everybody,
I get an authorisation problem, I hope to be in the correct forum.
I am about to adapt some rules for Fi user. When using transaction code S_ALR_87012284, I get an error message about a missing authorisation.
After running SU53, I see that the object F_T011, with the activity 03 and the statement version I required are missing.
In PFCG, I added manually in my rule these missing authorisation. I generated the rule but the problem is still happening. In debug mode I see effectively that the "authority-check" on this authorisation object F_T011 is missing.
In looking in PFCG, I see that my authorisation object F-T011 was added to the authorisation T-BT19013100. But if I run SUIM to see the authorisation object presents in the authorisation T-BT19013100, I see all the other object but not object F_T011.
It seems that a link or something like that is missing between the authorisation and the authorisation object.
Does someone have an idea ?
If someone want more details or screenshots of PFCG or SUIM to better see what I explained, don't hesitate to answer.
Thanks in advance,
Regards
Céline JOMARD

I find the solution : It seems that I needed to regenerate after transport the rule in the other client.

Authorisation object on plant

Similar Messages

Maybe you are looking for