Authorisation object on table

Hi,
I have a z table with table maintenance generator in which company code, plant, storage location , material, quantity are the fields.
Now i want to provide the authorisation object on the table using the companycode field.How can i do this?

the table maintenance generator will have created a function group with the name of the table (default). go to SE56 (name of the table -> display) click on button Fn.Gr.Text, next button Main program -> in the bottom part of that function group you will find a section named
User-defined Include-files (if necessary). *
you can code your authority check there ...

Similar Messages

What is authorisation object in table maintanance generator

Hi,
what is authorisation object and authorisation group in table maintanance generator
can u pls let me know what are these?? and y do we need these?
Thanks in advance
Rama

hi,
Access to the transactions SM30 and SE16 is often regarded as a security risk on productive system. But with the right use of the authorization object S_TABU_DIS and the rarely used S_TABU_LIN, this isnt so.
With S_TABU_DIS you have the option to control access to groups of tables, and you have the option to distinguish between Update and Display access. If you dont want to give access to an entire table group, its quite easy in transaction SE54 to create a new authorization group and to reassign one or more tables/view to this group, thus achieving control of access to these specific tables.
If youre anxious about giving access to an entire table group, due to the fact that some tables have an open interface which allows table maintenance even in transaction SE16, the check this report developed and posted to the SAP Fans security forum by John A. Jarboe.
With the authorization object S_TABU_LIN you can even go a step further and control access to a table on record level, based on the key fields of the table. You can find an overall presentation of the object here.
The How-To guide below will demonstrate how to set up and use this authorization object.
The example is based on a small table ZMYTABLE. I have created a maintenance view and parameter transaction based on SM30 around this table.
Please notice that the parameter transaction is calling SM3o in update mode.
If the object is to be used with SE16 youll need to implement OSS note 763269.
S_TABU_LIN Customizing
We can find the customizing entries in the IMG under SAP NetWeaver à Application Server àSystem Administration àUsers and Administration à Line-oriented Authorizations.
First we need to define the organizational criterias.
In here create new criteria by pushing the New entries button.
In this example we will like to control access based on the key field Country, in order to do so create a criteria called Z_Country_Grp, with the name Country Grp. If we flag the table-ind flag the criteria will affect maintenance of all tables whose key fields are related to the domains specified in the attribute later.
In this example we only want to control the access to the specific table ZMYTABLE so we will leave it blank
Save the entry and assign it to a transport request.
Now mark the created line and switch to attributes
Create a new entry with the data shown below.
Save it and assign it to the transport request.
Notice that you can have up to 8 organizational criterion attributes.
Now we need to assign a table and a field to our attribute
In order to do so mark the attribute and switch to Table Fields
In here create a new entry and assign, in this example, the table ZMYTABLE, and the field name country to the attribute.
Please notice that only Key fields can be used !
Save and assign to transport request
Now we are ready for activating our organizational criteria this is the second bullet in the IMG
Just check the active flag and the check is activated.
Incorporate the authorization object in a role
We have now implemented the authorization check; next step is to implement it in the required roles.
In this example I have created a parameter transaction ZMYTRANSACTION - using SM30 around the table ZMYTABLE. I have create a small test role ICC_TEST, including only the transaction ZMYTRANSACTION, and a few support transactions.
In the authorization part I have inserted the object S_TABU_LIN manually (best practice is of course to assign it in SU24), but a manual insert will also do the trick J
Now when we change one the authorization fields by pushing the pencil the profile generator will ask us for the criteria.
Here we chose the Z_COUNTRY_GRP criteria that we have created.
Well now get the following popup, in this case we will grant change access, so we choose 02 Change for activity
In the list below well see the Organizational Attributes that we have created we have the option to use up to 8 attributes in the example we had only defined one attribute Country Grp - we assign the value DK thus only granting access to records with DK in the key field country.
To transfer the selection back to the profile generator press th transfer button or press F5.
Now we just need to generate the profile and assign it to a test user.
Now when this test user signs on to and executes the transaction only entries for Cty DK is displayed.
If the transaction is executed by a user with SAP_ALL all records are displayed,
Important Links For u:[http://www.sapsecurity.co.uk/sap-authorisation-objects.html]
Thanks And if helpful please reward points

Authorisation objects - FICO

Hi experts,
I need to find the list of Authorisation objects for FI & CO.
If I go by table, How do i restrict for FI alone. kindly suggest the best way to find the authorisation objects. I have to create a authorisation matrix and where i can find a sample or template for the authorisation matrix. is it available in help.sap?
Many thanks.
regards
Dinesh

Hi,
Please check below mentioned authorisation objects
F_ACCL_ACT BCA Account Closure: Activity
F_ACE_DST Accrual Engine: Accrual Objects
F_ACE_PST Accrual Engine: Accrual Postings
F_ACHY_ACT BCA Account Hierarchy: Activity
F_ACHY_BKA BCA Account Hierarchy: Bank Area
F_ACT_EBPP Authorization Object for the Activities (EBPP)
F_AVIK_AVA Payment Advice: Authorization for Advice Types
F_AVIK_BUK Payment Advice: Authorization for Company Codes
F_BAF4_FXT FDB: Authorization for Exchange Rate Category
F_BAF4_MDC FDB: Market Data Area
F_BAF4_PRT FDB: Authorizations for Price Type (Securities)
F_BAF4_SCE FDB: Authorization to Edit Real Data
F_BAF4_SCN FDB: Scenario
F_BAF4_SPT FDB: Authorizations for Spread Type
F_BAF4_VOT FDB: Authorization for Volatility Type
F_BAST_ACT BCA Bank Statement: Activity
F_BAV_BUK Treasury BAV General Rights
F_BKKA_ACT BCA Account: Activity
F_BKKA_ATT BCA Account: Authorization Types
F_BKKA_BKA BCA Account: Bank Areas
F_BKKA_BPG BCA Account: Authorization Group According to BP
F_BKKA_FDG BCA Account: Field Groups
F_BKKA_GRP BCA Account: Authorization Groups
F_BKKA_GSB BCA: Activities for Each Business Area
F_BKKA_PRG BCA Account: Authorization Group According to Product
F_BKKA_RCT BCA Account: Reactivate
F_BKPF_BED Accounting Document: Account Authorization for Customers
F_BKPF_BEK Accounting Document: Account Authorization for Vendors
F_BKPF_BES Accounting Document: Account Authorization for G/L Accounts
F_BKPF_BLA Accounting Document: Authorization for Document Types
F_BKPF_BUK Accounting Document: Authorization for Company Codes
F_BKPF_BUP Accounting Document: Authorization for Posting Periods
F_BKPF_GSB Accounting Document: Authorization for Business Areas
F_BKPF_KOA Accounting Document: Authorization for Account Types
F_BKPF_VW Acc. Document: Change/Display Default Vals for Doc.Type/PKey
F_BL_BANK Authorization for House Banks and Payment Methods
F_BNKA_BUK Banks: Authorization for Company Codes
F_BNKA_MAC Can be assigned; Still no usage, deletion not possible?
F_BNKA_MAN Banks: General Maintenance Authorization
F_BNKA_MAO Banks: General Maintenance Authorization by Country
F_CASH_ACG BCA Means of Payment Management: Auth. Group Acc. to Account
F_CASH_ACT BCA Means of Payment Management: Activity
F_CASH_ATT BCA Means of Payment Management: Authorization Types
F_CASH_BKA BCA Means of Payment Management: Bank Area
F_CASH_BPG BCA Means of Payment Management: Auth. Group According to BP
F_CASH_PRG BCA Means of Payment Management: Auth. Group Acc. to Product
F_CASH_TYP BCA Means of Payment Management: Position Type
F_CHAINREV Loans: Chain Reversal
F_CHG_COND Loans: Change Conditions After Posting
F_CLOS_ACT BCA Balancing: Activity
F_COND_ACT BCA Conditions: Activity
F_COND_ATT BCA Conditions: Authorization Types
F_COND_BDC BCA Conditions: Retroactive Condition Change
F_COND_COA BCA Conditions: Condition Area
F_COND_ITP BCA Conditions: Individual Conditions Condition Category
F_COND_TYP BCA Conditions: Condition Category
F_DABS_BUK Loans: Write off Debit Position - CoCd/Partner Authorization
F_DCFL_GLO Global Authorization Object for Decoupled System Landscapes
F_DEURCONV Loans: Contract Currency Changeover to Euro
F_DSIC_ACT Loans: Collateral - Maintenance Authorization
F_DVER_BUK Loans: Waiver Debit Postion - Authorization for CoCd/Pr.Type
F_DZNB_BEA Loans: Processing Key for Payment Postprocessing
F_DZNB_SEL Loans: Selection Authorization for Payment Postprocessing
F_EDX_AUTH EDX: Authorizations for Company Code, Activity, Messages
F_EMAC_FDG BCA Employee Accounts: Field Groups on Account
F_EMAC_MTH BCA Employee Accounts: Allowed Methods
F_EMAC_TRN BCA: Employee Accounts: Transaction Types
F_EPIC_BKC Authorizations for Bank Communications
F_EPIC_BKQ Authorization to execute Bank Queries
F_EPIC_BKU Authorizations for Secure Logon User Maintenance
F_FAGL_CV Customizing: Versions
F_FAGL_DRU General Ledger:Authorization for Rule Entries for Validation
F_FAGL_LDR General Ledger: Authorization for Ledger
F_FAGL_SEG General Ledger: Authorization for Segment
F_FAGL_SKF FI: Processing of Statistical Key Figures
F_FAST_CLS Fast Close Authorizations
F_FBCJ Cash Journal: General Authorization
F_FBK_SUST Vendor: Sustainability Authorization
F_FCRD_CRD Payment Cards: Card Master Record
F_FCRD_DAT Payment Cards: Data File
F_FCRD_VOU Payment Cards: Card Document
F_FDES_BUK Cash Management and Forecast: Company Code Memo Records
F_FDES_GSB Cash Management and Forecast: Business Area Memo Records
F_FDSB_BUK Cash Position: Company Code Summary Records
F_FDSB_GSB Cash Position: Business Area Summary Records
F_FDSR_BUK Liquidity Forecast: Company Code Summary Records
F_FDSR_GSB Liquidity Forecast: Business Area Summary Records
F_FEBB_BUK Company Code Bank Statement
F_FEBC_BUK Company Code Check Deposit/Lockbox
F_FICA_CCT Funds Management, Cross-Funds Center
F_FICA_CIG Funds Management: Commitment Item Groups
F_FICA_CTR Funds Management Funds Center
F_FICA_CVE Funds Management: Cover Eligibility
F_FICA_CVP Funds Management: Cover Pool
F_FICA_EAL Funds Management: Collective Expenditure
F_FICA_FAG Funds Management: Function Groups
F_FICA_FCD Funds Management Fund
F_FICA_FCG Funds Management: Funds Center Groups
F_FICA_FMC FM - CO Account Assignment: Controlling Area
F_FICA_FNG Funds Management: Fund Groups
F_FICA_FOG Funds Management: Authorization Group of Fund
F_FICA_FPG Funds Management: Authorization Group for Commitment Item
F_FICA_FSG Funds Management: Authorization Group for Funds Center
F_FICA_FTR Funds Management FM Account Assignment
F_FICA_KDR Funds Management: Account Assignment Derivation
F_FICA_KDS Maintain Strategy of FM Account Assignment Derivation
F_FICA_POP Funds Management: authorization group posting period
F_FICA_PPL Funds Management: Chart of Commitment Items
F_FICA_SEG Funds Management: Authorization Group for All Funds Centers
F_FICA_SIG Funds Management: Authorization Group Internal Funds Centers
F_FICA_TRG Funds Management: Authorization Groups of FM Acct Assignment
F_FICA_WCT Funds Management Within One Funds Center
F_FICB_FKR Cash Budget Management/Funds Management FM Area
F_FICB_FPS Cash Budget Management/Funds Management Commitment Item
F_FICB_VER Cash Budget Management/Funds Management Version
F_FICO_AIN FICO Individual Condition BAPIs
F_FICO_AST FICO Standard Condition BAPIs
F_FICO_ATT FICO Financial Conditions: Authorization Types
F_FICO_FDG FICO Financial Conditions: Field Groups
F_FICO_IND FICO Individual Conditions
F_FICO_STD FICO Standard Conditions
F_FIGM_BUD Grants Management: Authority for Budget
F_FIGM_CLS Grants Management: Authority for Class
F_FIGM_GNG GM: Grant Groups
F_FIGM_GNT Grants Management: Authority for Grant
F_FIGM_PRG Grants Management: Authority for Programs
F_FIGM_SCG GM: Sponsored Class Groups
F_FIGM_SPG GM: Sponsored Program Groups
F_FKKCJ FI-CA Authorization Object for Cash Journal
F_FM_DRRUL Funds Management: Rules of Account Assignment Derivation
F_FM_DRSTR Funds Management: Account Assignment Derivation Strategy
F_FM_OPEN FM: Authorization for Specially Opened Processes
F_FMBU_ACC Budgeting: Account Assignment
F_FMBU_DOC Budgeting: Document Type
F_FMBU_KEY Budgeting: Keyfigure
F_FMBU_KYF Budgeting: Keyfigure
F_FMBU_LAY Budgeting:FMPEP Layout
F_FMBU_STA Budgeting: Status
F_FMBU_VER Budgeting: Version and Budget Category
F_FMCA_IPM PSCD Installment Plan: Authorization for Mass Approval
F_FMCA_SHE Clarification Worklist (FMSHERLOCK)
F_FMCA_WOF IS-PS-CA: Write Off: Approval for Write-Off Reason
F_FMCA_WOM PSCD Write-Off: Authorization for Mass Approval
F_FMFG_DUN FM-FG: CCR Vendor Master
F_FMMD_FAR Funds Management: Functional Area (Authorization Group)
F_FMMD_FPG FM: Funded Porgram Sets
F_FMMD_MES Funds Management: Funded Program (Authorization Group)
F_FMME_ATT Funded Program authorizations
F_FMRE_BLK Funds locking, company code
F_FMRE_COM Funds commitment, company code
F_FMRE_FOR Forecast of revenue, company code
F_FMRE_PRE Funds precommitment, company code
F_FMRE_RES Funds reservation, company code
F_FMRE_TRA Funds transfer, company code
F_FMSHER Clarification Worklist - FMSherlock
F_FMSPLITG Authorization for Rule-Based Distrib'n to Multiple Acct Assn
F_FMWF_RSN Reasons for Release and Rejection, FM Workflow
F_FOPCMAIN MIC: Main Authorization
F_FUNDSRES Earmarked Funds, Funds Transfer
F_GLLO_ACG GL Loss on Receivables: Authorization Group Account
F_GLLO_BKA BCA General Ledger - Loss on Receivables: Bank Area
F_GLRE_BKA BCA General Ledger Reconciliation: Bank Area
F_GLVA_ACG BCA GL Individual Value Adjustment: Authorization Group Acct
F_GLVA_BKA BCA General Ledger - Individual Value Adjustment: Bank Area
F_GLVA_BPG BCA GL Individual Value Adjustment: Authorization Group BP
F_GLVA_PRG BCA GL Individ. Value Adjustment:Authorization Group Product
F_GMBU_ACC GM Budgeting: Account Assignment
F_GMGT_ATT Grants Management: Authorization Types
F_GMGT_FDG Grants Management: Field Groups
F_GMGT_GRP Grants Management: Authorization Groups
F_GMGT_RLT Grants Management: BP Roles
F_HMAC hmac_key
F_HOLD_ACT BCA Holds: Activity
F_INFO_BUK Central: Information System - CoCd, Trans. Type, Auth. Group
F_INVPGRIR Authorization for Performing GR/IR Clearing
F_INVRPGIR Authorization for GR/IR Journal (Inventory Info System)
F_INVRPMAT Authorization for Material Journal (Inventory Info System)
F_INVRPWIP Authorization for WIP Journal (Inventory Info System)
F_ISSR_1 Transaction Authorization Check
F_ISSR_AD
F_ISSR_BV Position Management
F_ISSR_BVC
F_ISSR_CU
F_ISSR_CUC
F_ISSR_DU
F_ISSR_GPC
F_ISSR_ID
F_ISSR_LTD
F_ISSR_MIG
F_IT_ALV Line Item Display: Change and Save Layout
F_ITTC_BUK
F_KBE__RES Funds reservation, company code
F_KBE__TRA Payment Transfer Company Code
F_KK_AVIS FI-CA Payment Advice Note in Contract A/R + A/P
F_KK_CJROL Cash Journal: Maintenance of Responsibilities
F_KK_EBPP FI-CA Special Functions for FSCM Biller Direct
F_KK_FCODE FI-CA authorizations for GUI functions with master data
F_KK_KUKON Authorization Check for Short Account Assignment
F_KK_LOCK FI-CA Processing Locks
F_KK_ODBUK FI-CA Request: Company Code Authorization
F_KK_ODCLA FI-CA Request: Mass Approval of Requests
F_KK_ODCLS FI-CA Request: Authorization for Request Class
F_KK_ODTYP FI-CA Request: Authorization for Request Category
F_KK_REPT FI-CA Receipt Management
F_KK_SEC FI-CA Security Deposit
F_KK_SOND FI-CA Special Functions
F_KKCASH FI-CA Authorization Object for Payment at Cash Desk
F_KKCC Obsolete !!! FI-CA Correspondence Generation
F_KKCMK FI-CA - Manual Checks Lot
F_KKCO Obsolete !!! FI-CA Correspondence in Contract A/R and A/P
F_KKCODU Correspondence Dunning in Contract Accounting
F_KKCR FI-CA Display Creditworthiness of a BP and Change Manually
F_KKCR_BUK FI-CA Authorization for Check Management / DFKKCR
F_KKDEVREV FI-CA Deferred Revenue Postings Transfer Posting Run
F_KKDU FI-CA Dunning in Contract Accounts Receivable & Payable
F_KKDU_BUK FI-CA Dunning in Contract Accts Rec. & Payable: CoCode Auth.
F_KKDUTL FI-CA Dunning: Telephone List
F_KKINDPAY FI-CA Payment Specification
F_KKINK FI-CA Authorization Object for Collection Agency
F_KKINSTPL FI-CA Auth. for Installment Plans in a Contract Account
F_KKINTER Authorization for Interest Posting
F_KKIP FI-CA Payment Specification
F_KKKO_AEN FI-CA Document in Contract A/R + A/P: Changeable Fields
F_KKKO_BEG FI-CA Doc.in Contract Accts Rec. & Pay.: Acct Authorization
F_KKKO_BUK FI-CA Doc.in Contract Accts Rec.& Pay.: CoCode Authorization
F_KKKO_GSB FI-CA Doc.in Contract Accts Rec. & Pay.: Business Area Auth.
F_KKMA FI-CA Mass Activities in Contract Accts Receivable & Payable
F_KKMDU Master Data Lot in Contract Accounts Receivable and Payable
F_KKMIGRAT FI-CA IS Migration Workbench
F_KKNR FI-CA NOC Returns Lot in Conract Accts Rec. and Payable
F_KKPY FI-CA Automatic Payment Transactions in Contract A/R & A/P
F_KKRD_MAS FI-CA Document Reversal - Mass Processing
F_KKRK FI-CA Returns Lot in Contract A/R + A/P
F_KKRV FI-CA Transfer Posting Run Receivable Evaluation
F_KKSU FI-CA Reconciliation Key and Posting Totals
F_KKVARI FI-CA Maintain Variants for Parallel Processing
F_KKVK_BEG FI-CA Contract Account: Authorization Group
F_KKVK_BUK FI-CA Contract Account: Company Code Authorization
F_KKVK_FDG Contract Account: Authorization for Individual Field Groups
F_KKVK_VKT FI-CA Contract Acct: Contract Acct Type Authorization
F_KKWOFF FI-CA Write-Off Open Documents of a Business Partner
F_KKWOFFM FI-CA Authorization for Mass Clearing of Open Documents
F_KKZK FI-CA Payment Lot in Contract A/R & A/P
F_KKZWF FI-CA Authorization for Receivables Evaluation
F_KMT_MGMT Account Assignment Model: Auth. for Maintenance and Use
F_KNA1_AEN Customer: Change Authorization for Certain Fields
F_KNA1_APP Customer: Application Authorization
F_KNA1_BED Customer: Account Authorization
F_KNA1_BUK Customer: Authorization for Company Codes
F_KNA1_GEN Customer: Central Data
F_KNA1_GRP Customer: Account Group Authorization
F_KNA1_KGD Customer: Change Authorization for Account Groups
F_KNB1_ANA Customer: Authorization for Account Analysis
F_KNKA_AEN Credit Management: Change Authorization for Certain Fields
F_KNKA_KKB Credit Management: Authorization for Credit Control Area
F_KNKA_MAN Credit Management: General Maintenance Authorization
F_KNKK_BED Credit Management: Account Authorization
F_L_ACCRUL Leasing Accounting Authorization Object
F_LC_AUS Consolidation: Authorization for reports
F_LC_COM Consolidation: Authorization for companies
F_LC_ERH Consolidation: Authorization for data entry forms
F_LC_LDNR Consolidation: Authorization for ledgers
F_LC_SUBD Consolidation: Authorization for subgroup
F_LC_URUN Consolidation: Authorization for update
F_LC_VERS Consolidation: Authorization for versions
F_LFA1_AEN Vendor: Change Authorization for Certain Fields
F_LFA1_APP Vendor: Application Authorization
F_LFA1_BEK Vendor: Account Authorization
F_LFA1_BUK Vendor: Authorization for Company Codes
F_LFA1_GEN Vendor: Central Data
F_LFA1_GRP Vendor: Account Group Authorization
F_MAHN_BUK Automatic Dunning: Authorization for Company Codes
F_MAHN_KOA Automatic Dunning: Authorization for Account Types
F_MANDATE Authorization to Process a SEPA Mandate in FI
F_MET_BEG Loans: Authorization Group for Condition Table
F_MIE_SKO Real Estate: Rental agreement - Authorization for conditions
F_MNG_CON Real Estate: Management Contract - Authorization for CoCd
F_NFBA Authority Check for Nota Fiscal Writer Brazil
F_NTC_ACT BCA Notice: Activities for each Bank Area
F_NTC_AMT F_NTC_AMT
F_NTC_GRP Notice: Authorization for each Group
F_NTC_PER F_NTC_PER
F_PAIT_ACG BCA Payment Item: Authorization Group According to Account
F_PAIT_ACT BCA Payment Item: Activity
F_PAIT_ATT BCA Payment Item: Authorization Types
F_PAIT_BDA BCA Payment item: Backdated payment items.
F_PAIT_BKA BCA Payment Item: Bank Area
F_PAIT_BPG BCA Payment Item: Authorization Group According to BP
F_PAIT_GRP BCA Payment Item: Authorization Group
F_PAIT_PRG BCA Payment Item: Authorization Group According to Product
F_PAOR_ACG BCA Payment Order: Authorization Group According to Account
F_PAOR_ACT BCA Payment Order: Activity
F_PAOR_ATT BCA Payment Order: Authorization Types
F_PAOR_BKA BCA Payment Order: Bank Area
F_PAOR_BPG BCA Payment Order: Authorization Group According to BP
F_PAOR_GRP BCA Payment Order: Authorization Group
F_PAOR_PRG BCA Payment Order: Authorization Group According to Product
F_PAYM_ACT Additional activity checks for payment items/orders
F_PAYOH_AV Release and Rejection Reasons
F_PAYR_BUK Check Management: Action Authorization for Company Codes
F_PAYRQ Authorization Object for Payment Requests
F_PERI_ACT BCA Periodic Tasks: Activity (Simulation Update Run)
F_PMT_TRNS Real Estate: Payment Transaction - Author. CoCd/Activity
F_POD_BEG Loans: Authorization Group for Files
F_POH_BEG Loans: Authorization Group for Main Files
F_PRL_BUK Payment Release: Authority object by Com.Code and Action
F_PROD_GRP BCA/FIPR Product: Authorization Group
F_PSDO_BEG PSCD Document: Authorization Group for Contract Object
F_PSDO_VGT PSCD Beleg: Contract Object Type Authorization
F_PSFA_CAT PSCD Facts. Fact Type Parts
F_PSFA_SET PSCD Facts: Authorization for a Fact Set.
F_PSFA_TYP PSCD Facts. Fact Set Parts
F_PSM_DRUL Rules for Account Assignment Derivation
F_PSM_DSTR Strategy for Account Assignment Derivation
F_PSMEC_CR Expenditure Certification: Certification Run
F_PSMEC_FS Expenditure Certification: Financing Source
F_PSMEC_OP Expenditure Certification: Certifying Operation
F_PSOB_ATT PSCD Contract Object: Authorization Types
F_PSOB_BEG PSCD Contract Object: Authorization Group
F_PSOB_FDG PSCD Contract Object: Field Groups
F_PSOB_VGT PSCD Contract Object: Object Type Authorization
F_RE_BRGRP Real Estate: Authorization Group
F_RE_REPOR Real Estate: Reporting - Author.for CoCd/Auth.Grp/Data Type
F_RE_TRANS Real Estate: General Transaction Authorization
F_REAJ_AT Real Estate: Adjustment Measure
F_REAJ_CG Real Estate: Comparative Group
F_REAJ_PR Real Estate: Adjustment of Conditions
F_REBD_AO Real Estate: Architectural Object
F_REC_TAX Authorization Check for Tax Auditor
F_RECD_CN Real Estate: Conditions - Contract
F_RECD_RO Real Estate: Conditions - Rental Object
F_RECN Real Estate: Real Estate General Contract
F_RECN_ATT Real Estate: Authorization Types for General Contract
F_RECN_FDG Real Estate: Field Groups for General Contract
F_RECN_SKO Real Estate: Conditions for Real Estate General Contracts
F_REGU_BUK Automatic Payment: Activity Authorization for Company Codes
F_REGU_KOA Automatic Payment: Activity Authorization for Account Types
F_REIT_DS Real Estate: Input Tax Distribution
F_REIT_OR Real Estate: Option Rate Determination
F_REIT_TC Real Estate: Correction Object
F_RELM_JL Real Estate: Joint Liability
F_RELM_LR Real Estate: Land Register
F_RELM_NA Real Estate: Notice of Assessment
F_RELM_PE1 Real Estate: Public Register: Contamination/Non-Hazard.Waste
F_RELM_PE2 Real Estate: Public Register: Site Protection
F_RELM_PE3 Real Estate: Public Register: Development Plan
F_RELM_PE4 Real Estate: Public Register: Easement Register
F_RELM_PL Real Estate: Parcel of Land
F_RELM_RC Real Estate: Parcel Update
F_REMM_MN Real Estate: Mandate
F_REOR_OF Real Estate: Contract Offer
F_REOR_OO Real Estate: Offered Object
F_REOR_RR Real Estate: RE Search Request
F_REORG_PL General Ledger: Authorization for Reorganization
F_RERA_OP Real Estate: One-Time Postings
F_RESC_PG Real Estate: Participation Group
F_REXC_MS Real Estate: Main Rent Statement
F_RNT_ADJ Real Estate: Rent Adjustment - Authorization for CoCd/Method
F_RNT_OFF Real Estate: Offer - Authorization for CoCd/Bus.Entity
F_RPCODE Repetitive Code
F_RPROC Intercompany Reconciliation: Authorizations
F_RPUS_ATT Retirement plan: Authorization types
F_RPUS_FDG Retirement plan: Field groups
F_RQRSVIEW Bank Ledger: Viewer for Request Response Messages
F_RTP_ACT Retirement plan: Activity
F_RTP_AGP Retirement plan: Authorization group
F_RTP_BKA Retirement plan: Bank area
F_RTP_BPA Retirement plan: Authorization accountholder
F_RTP_BPG Retirement plan: Authorization accountholder (obsolete)
F_RTP_GRP Retirement plan: Authorization group (obsolete)
F_SEPA_MDT Authorization for Processing a Global SEPA Lock
F_SKA1_AEN G/L Account: Change Authorization for Certain Fields
F_SKA1_BES G/L Account: Account Authorization
F_SKA1_BUK G/L Account: Authorization for Company Codes
F_SKA1_KTP G/L Account: Authorization for Charts of Accounts
F_STAT_MON Bank Relationship: Status Monitor authorizations
F_STAT_USR Bank Communication: Assignment of Signature User ID
F_STO_TRAN Loans: Authorization for Reversal Transaction
F_STOR_ACG BCA Standing Order: Authorization Group According to Account
F_STOR_ACT BCA Standing Order: Activity
F_STOR_ATT BCA Standing Order: Authorization Types
F_STOR_BKA BCA Standing Order: Bank Area
F_STOR_BPG BCA Standing Order: Authorization Group According to BP
F_STOR_FDG BCA Standing Order: Field Groups
F_STOR_GRP BCA Standing Order: Authorization Group
F_STOR_PRG BCA Standing Order: Authorization Group According to Product
F_T_FBNAME Treasury: Authorization for Asynchronous Datafeed
F_T_PART_B Treasury: Business Partners: Authorization Group per Role
F_T_PART_R Treasury: Business Partners: Role Authorization
F_T_TRANSB Treasury: Transaction Authorization
F_T_VTBLL Limit Transfers
F_T_VTBLR Limit Reservations
F_T_VTBLV Limit
F_T_VTBMA Master Agreement
F_T011 Financial Statements: General Maintenance Authorization
F_T011_BUK Planning: Authorization for Company Codes
F_T011E Authorization for Financial Calendar
F_T011XBRL F/S from XBRL Taxonomy: General Maintenance Authorization
F_T042_BUK Payment Program Customizing: Authorization for Company Codes
F_T060_ACT Info System: Account Type/Activity for Evaluation View
F_TD_CORR controls the correction of an already fixed time deposit.
F_TR_MRM_S Scenario Maintenance
F_TRAVL Travel Planning
F_TRAVL_RW Travel Expenses: Posting Run Management
F_TRAVL_S Travel Planning Status Travel Agency
F_TRAVL_TG Separation Allowance
F_TRAVL_TP Maintain Separation Allowance Periods
F_TXW_RA DART: Retrieve data from archive
F_TXW_TF DART: Data extracts
F_TXW_TFCF DART: Data extract configuration
F_TXW_TV DART: Data view queries
F_TXW_TVC2 DART: Data view configuration, with AuthGrp
F_TXW_TVCF DART: Data view configuration
F_UDM_ESCA Dispute Case: Check of Escalation Reasons
F_UDM_GRUP Authorization for Collection Group
F_UDM_PRUN Program with Parallel Processing
F_UDM_SGMT Authorization for Collection Segment
F_UDM_STGY Authorization for Strategies
F_UDM_WLIT Worklist Items
F_UHC_ACT Collection Case: Actions
F_UKM_SGMT SAP Credit Management Authorization for Credit Segment
F_UMV_BUK Real Estate: Sales-based agreement adj. - CoCd authorization
F_VGINT Change to Posting Rule in FEBAN
F_WEB_ADRS Display/Change of Address Data via Web Interface
F_WEB_BANK Display/Change of Bank Data
F_WEB_BCNF Display/Change of a Balance Confirmation
F_WEB_BLNC
F_WEB_EBPP Participation in EBPP Process via Web Interface
F_WEB_ITEM
F_WEB_MTCH
F_WIBE Real Estate: Cost Efficiency Analysis
F_WORKQ001 Authorization Object for Work Queue
F_WTMG Withholding Tax Changeover
F_XCIT_ICI Real Estate: Italian localisation - ICI
F_XCIT_IRE Real Estate: Italian localisation - IRE
F_ZTXT_ACT Word Processing: Maintenance Authorization
FAGL_INST Customer Enhancements for General Ledger
FB_SRV_DMS Financials Basis: Data Model Synchronization
FB_SRV_GC Financials Basis: Garbage Collector
FB_SRV_TR Financials Basis: Transport
FD_AKT_ACT Loans: Filed Documents - Maintenance Authorization
FD_AUS_BUK Loans: Disbursement - Company Code Authorization
FD_AUS_GSA Loans: Disbursement - Authorization for Product Types
FD_BAV_BUK Loans: Transfer BAV Data - Company Code Authorization
FD_BEL_ACT Loans: Collateral Value - Maintenance Authorization
FD_BO_BUK Activity Authorization Based on Business Operation Category
FD_BUK_LAY Loans: Changing and Saving ALV Layouts
FD_CHARAC Loans: Authorization for Processing Characteristics
FD_CLI_GRP CL CLI: Authorization Group for Changes to a CLI Policy
FD_COT_GRP Loans: Authorization Group for Condition Table
FD_COT_PRD Loans: Assignment of Product to Condition Table
FD_DAR_ACT Loans: Transaction Check for Product Category
FD_DAR_BEG Loans: Authorization Group for Loan Contracts
FD_DAR_BUK Loans: Company Code Authorization
FD_DAR_DIS Distribution Channel
FD_DAR_GSA Loans: Authorization for Product Types
FD_DAR_RBD Loans: Authorization Check for Reserve for Bad Debts
FD_DAR_SBW Loans: Flow Type
FD_DAR_STA Loans: Status Authorization
FD_IA_ZANF Loans: Investor Account - Payment upon Request
FD_MAN_BUK Loans: Manual Debit Position - Company Code Authorization
FD_MAS_BUK Loans: Automatic Debit Position - Company Code Authorization
FD_MET_BUK Loans: Rollover Methods - Company Code Authorization
FD_OBJ_ACT Loans: Collateral Objects - Maintenance Authorization
FD_POD_BUK Loans: Rollover File - Company Code Authorization
FD_POG_BUK Loans: General Rollover File - Company Code Authorization
FD_POH_BUK Loans: Main Rollover File - Company Code Authorization
FD_POK_BUK Loans: Configure/Fill Rollover File - Company Code
FD_PROD_BG Loans: Authorization Group for Products
FD_SET_STA Loans: Automatic Status Transfer
FD_STOP_CD Loans: Authorization Check for Stop Code
FD_UMB_BUK Loans: Transfers - Authorization for CoCd / Product Type
FDT_ADMN BRFplus: Administration/Monitoring
FDT_OBJECT BRFplus: Authorization Check on Object Level
FDT_PROC BRFplus: Processing (Web Service/RFC)
FDT_TRACE BRFplus: Authorization Check on Trace
FDT_WORKB BRFplus: Authorization Check for BRFplus Workbench
FI_ABR_BUK Real Estate: Settlement unit - Company code authorization
FI_BAV_BUK Real Estate: Transfer BAV data - Company code authorization
FI_BEW_ACT Real Estate: Application - Maintenance authorization
FI_BKA_BUK Real Estate: Operat.costs stt. - Company code authorization
FI_FAG_BUK Real Estate: Free rent adj. commerc.agrmnt - CoCd authoriz.
FI_FAW_BUK Real Estate: Free rent adj. resid. agrmnt - CoCd authoriz.
FI_GAR_BUK Real Estate: Rent adj. of garage rent - CoCd authorization
FI_GBU_ACT Real Estate: Land register - Maintenance authorization
FI_GEB_BUK Real Estate: Building - Auth. for CoCd/business entity
FI_GRU_BUK Real Estate: property - Author.for CoCd/business entity
FI_HEI_BUK Real Estate: Heating system - Company code authorization
FI_HKA_BUK Real Estate: Heating expenses stt. - CoCd authorization
FI_IND_BUK Real Estate: Index-linked rent - Company code authorization
FI_KUE_BUK Real Estate: Notice on lease-out - Author.for CoCd/BE
FI_ME1_BUK Real Estate: Rental unit - Authoriz.for CoCd/business entity
FI_MIE_BUK Real Estate: Rental agreement - Authoriz. for CoCd/BE
FI_MIS_ACT Real Estate: Repr.lists of rents - Maintenance authorization
FI_MIS_BUK Real Estate: Repr.list of rents adj. - CoCd authorization
FI_MOD_BUK Real Estate: Modernization adjustment - CoCd authorization
FI_RAU_BUK Real Estate: Rooms - Authorization for CoCd/business entity
FI_VBE_BUK Real Estate: Comparative group - Company code authorization
FI_VWO_BUK Real Estate: Comparative apartment - Company code authoriz.
FI_WEI_BUK Real Estate: Business entity - Authoriz. for CoCd/BE
FI_WT_VEN Authorization object for vendr data enhancement
FI_ZAH_BUK Real Estate: Debit pos.payment transactions - CoCd authoriz.
FI_ZLG_BUK Real Estate: Surcharge adjustment - Company code authoriz.
FI_ZUO_ACT Real Estate: Assign RU/applic. - Maintenance authorization
FINB_ACINS Obsolete!!! Authorization with Reference to Accounting Inst.
FOT_B2A_V Admin. Report Electronic Data Transmission to Authorities
FPIA_GROUP Evaluate user groups (Gestinaire, Comptable, Super User etc)
FPP_ALL Authorization Object for All FPP Activities
FPP_CUST Authorization Object for Maintaining ParaProcessing Objects
FPP_USE Authorization for Using FPP Service Modules
FSCM_BCCE
FW_AKS_BUK Securities: Stock Split - Company Code Authorization
FW_BAV_BUK Securities: Transfer BAV Data - Company Code Authorization
FW_BES_BUK Securities: Position Indicator - Auth. for CoCd/Prod. Type
FW_BEZ_BUK Securities: Subscription Right - Company Code Authorization
FW_DEP_BUK Securities: Securities Account - Authorization for CoCd/TTy
FW_GAT_ACT Securities: Class - Transaction Check Prod. Cat./Activity
FW_GAT_GSA Securities: Class - Authorization for Transaction Types
FW_JUA_BUK Securities: New Stock - Company Code Authorization
FW_KAB_BUK Securities: Capital Reduction - Company Code Authorization
FW_KER_BUK Securities: Capital Increase - Company Code Authorization
FW_MAS_BUK Securities: Automatic Debit Position - CoCd/Product Type
FW_ORD_BUK Securities: Order - Company Code Authorization
FW_ORD_GSA Securities: Order - Authorization for Transaction Types
FW_ORD_STA Securities: Order - Status Authorization
FW_OSA_BUK Securities: Exercise WA - Authorization for CoCd/Prod. Type
FW_OST_BUK Securities: Detach WA - Company Code Authorization
FW_SON_BUK Securities: Other Postings - Company Code Authorization
FW_UMB_BUK Securities: Balance Sheet Transfer - Co. Code Authorization
FW_UMD_BUK Securities: Securities Account Transfer - CoCd Authorization
FW_WAN_BUK Securities: Exercise Convertible Bond - Company Code Auth.
FZ_BAV_BUK
FZ_FRG_KOM Release: Authorization Check - Release Object/Authoriz. Amnt
FZ_FRG_OST Release: Authorization for Release Object/Release Status
FZ_IND_ACT Index data: Maintenance authorization
FZ_PRT_ACT Partner Management: Partner - General Maintenance Authoriz.
FZ_PRT_AUS Partner Management: Partner Role - Selection Authorization
FZ_PRT_BEG Treasury: Business Partners: Authorization Group for Partner
Thanking you
Regards
Mahesh

Authorization object for table

Hi All,
I have created a table in Se11 and not allowing maintance generator.
Can any one please suggest if I am not allowing table maintaince then how I can attach authorization object to the tabe.
Thanks,
Sandeep.

Hi sandy,
1. I am not allowing table maintaince
    If u are not allowing the table for maintenance,
   then authorisation group is NOT REQUIRED.
2. Authorisation group is required only,
   in case where we allow table maintenance thru sm30.
(other wise there is no use of authorisation group for table)
regards,
amit m.

Authorisation object for Case Management

Hi Gurus.
I need to create authorisation object for Case Management,
SCMG_T_CASE_ATTR-CATEGORY Field,SCMG_CATEGORY element,
I use the tx SU21 and Su20, asigned this object to Role. But no WORK.
In the Su20:
Field Name: ZCATEGORY
Data elelment: SCMG_CATEGORY.
Table Name: SCMGATTR_CATEGO.
In the SU21:
Object: ZCASE
Class: AAAB
Field Name:
ACTVT
ZCATEGORY
When I use tx SCASE, The condition not work.
I use the field name ZCATEGORY because the field name CATEGORY was used by SAP. But for USC_Y_CONT_CATEGORY element
Edited by: Alfredo on Aug 1, 2008 5:39 PM

Hi Alfredo,
Go to SU24 tcode and see if the transaction SCASE is being check/maintaned to the authorization object ZCASE.
If not then you need to do that so that when you add the tcode SCASE to a role then you will see the authorzation object ZCASE which you have created. You can edit the role and change the authorizations for the field, ZCATEGORY and maintain.
Generate the role and then assign it to the user. I think it must work.
If it doesnot work then as Alex said, you need to go and look where the Authority check statement is placed in the program behind the SCASE tcode.
Hope this helps.
Regards,
Kiran Kandepalli.

How to debug a authority check in program and a authorisation object in tco

Can anyone tell me how to debug a authority check in program and a authorisation object in tcode
i just want to know the flow of authorisation object in debugging how user is assocaited with authorisation object and roles.
i know if sy-subrc ne 0 is authorisation failed ,so please help me anyone on this.
every time when i put breakpoint ,if its program level only, i am able to decide only through sy-subrc but iam unable o view the flow .

flow cannot be seen, we have to be based on sy-subrc only...
you cannot see the flow in read table... describe table... transfer...
the authorization object will be assigned to the data element, that data element has some realtion to the roles given to the users. So if the role of the user and data element value doesnt match the sy-subrc NE 0.

Disable an Authorisation object for Multiple roles.

Hi ,
I need to Disable an authorisation object F_BKPF_BUP for about 345 roles.Is there any way by which we can make mass changes.Doing it for individual role would take a lot of time.kindly advice.
Thanks in advance

Hi,
1. Go to SE16 --> table USOBT_C --> put object F_BKPF_BUP in the field "Object" --> execute without restriction. Download the list of TCodes.
Now go to Table AGR_TCODES --> put the list of TCodes (found with above method) in the field "Extended name" as multiple selection --> execute and download the list of roles.
Look up your list of 345 roles with this list. After matching, you need to sort out the TCodes present in this list of roles which is checking the object F_BKPF_BUP.
2. Now go to SU24.. go to option "Authorization Object" and NOT in the Transaction section.
Put the Object and execute.... go to change mode.... check the proposals for the TCodes you sorted at last step of point 1. Make the proposal Do Not Check where ever it is not so.
Move the Workbench Transport through Landscape. Your purpose will be done. But you should also keep in mind if the TCodes are present in other roles besides of your 345, those will become vulnerable.
Regards,
Dipanjan

Willl the count of authorisation objects in 2 NW2004s system be same?

I have a Nw2004s system with some Components of a particular Support Pack level
I have another NW2004s system having the same components , but with different support pack level
Will the total no of authorisation objects in both the system be same or different

Arun,
There are few tables you can look at and get the count by selecting with wildcards and get a count.
Cubes - RSDCUBE
DSO - RSDODSO
Multi-Provider - RSDCUBEMULTI
DataSource - ROOSOURCE (R3 side)
Report - RSRREPDIR
Youcan put 0* for standard objects Z* or Y* for custom objects (unless your client has special authorization from SAP to use other letters as custom object, because my client can create any object even cube with M, P etc)
Goodluck,
Alex(Arthur Samson)

Relationship between Authorisation objects and Tcode

Dear all, 
In 4.6C 
I go to Tcode SU01-> Tcode assignment->provide MB1A for tcode->F8-> value list, then I get the list of Authorization objects associated to this tcode.
Access to Tasks in General Notifications
Authorization for document activities
CS BOM Authorizations
Authorization for Class Types
Consolidation: Authorization for subgroup
PM: Task List
PM: Transaction Code
CO-CCA: Cost Center Planning
EC-PCA: Delete transaction data
EC-PCA: Actual Data Transfer
Warehouse Number / Storage Type
Transaction Codes in the Warehouse Management System
Document Type in Purchase Requisition
Purchasing Group in Purchase Requisition
Plant in Purchase Requisition
Purchasing Organization in Purchase Order
Evaluation Structure: Application
Material Master: Maintenance Statuses
Personnel Planning
HR: Reporting
HR: Master Data
HR: Master Data - Extended Check
HR: Master Data - Personnel Number Check
Use of Group Codes
Quality Notification Types
QM Transaction Authorization
Business Process Quality Notifications
System Authorizations
ALV Standard Layout
Background Processing: Background Administrator
Background Processing: Operations on Background Jobs
Administration Functions in the Change and Transport System
C Calls in ABAP Programs
Authorization for File Access
ABAP Workbench
SE61 Documentation Maintenance Authorization
Authorization for GUI activities
IMG: Authorization to Perform Functions in IMG
Language administration
SAPoffice: Authorization for an Activity with Documents
SAPoffice: Attribute of Office User
Authorization Object for Sending
OLE Calls from ABAP Programs
ABAP: Program run checks
IMG: New Authorizations for Projects
Authorization check for RFC access
Change documents
Spool: Device authorizations
Spool: Restriction on Maximum Number of Pages
Cross-client Table Maintenance
Table Maintenance (via standard tools such as SM30)
Authorization Check for Transaction Start
Transport Organizer
SAP ArchiveLink: Authorizations for access to documents
Sales Document: Authorization for Sales Document Types
Sales Document: Authorization for Sales Areas
This information is fetched from the table USOBX where name = MB1A and type = 'TR'
When I create a role in PFCG say ZTEST_ROLE and assign the only one tcode MB1A, I get additional authorisation objects below
CO-PC: Product Costing
Material Master: Company Codes
Material Master: Warehouse Numbers
Why do I get these additional objects ? What is the logic behind this?
My requirement is to check the authorisation objects associated to a Tcode.
Thankyou.

hi
there would be many authorisation objects for a tcode (like create,change display).....so if user is having that particular authorisation object only then he can do a particular activity in that tcode.
Regards
Sajid

Basic authorisation objects for display/execute

Hi Team,
For a start .....I need to create a basic user role for BEX (7.0)with Display and execution of the queries .
Down the lane another role with restricted access to only certain cubes
What is the authorisation objects needed to be given in that role?
Is there a std role which solves my purpose.?
I was playing with auth objects like S_RS_COMP, S_RS_COMP1,S_RFC....but coudn't get much farther.
Thanks for your time.
/Andy

Hi Nicco,
we evaluated ACE for two projects now and always found that customers are not very excited about administration of a)EP-roles b) CRM-roles and additonally c)ACE user groups which is furthermore a very new topic for all of us and therefore it seems there is little know-how existing. We are also not sure about the future of ACE if there are new development with BP-roles in 6.40? But for my personal opinion in the field of CRM and sensible data there is no way around ACE or something similar ...
Regarding performance we always had the felling that response time of PCUI-apps decreases when we activated ACE - maybe because there is some overhead with collecting ACE-data in different tables additionally to the other process of controllers and subcontrollers ... but this was only a personal experience, we never did any measurements which confirmed this "feeling".
Regards
Michael

SRM 7.0: Authorisation object? Aliases for services in java portal?

Here's how we did in old SRM 5.0 system (the old and working scenaio):
In SRM 5.0 we employed S_ICF object to determine, whether a particular user who has just logged in to a system via web using a particular alias - is authorised to use this service.
We want external and internal users to use different ways to get into system. We have two aliases:
for internal users: http://srm5.domain.com/srmint
for external users: http://srm5.domain.com/srmext
We make aliases using transaction SICF:
/srmext
/srmint
to service /default_host/sap/bc/gui/sap/its/bbpstart
For alias /srmext we set field SAP Authoriz. = EXT.
For alias /srmint we set field SAP Authoriz. = INT.
We make 2 roles, both containing just a S_ICF auth object with differend values of field ICF_VALUE, an appropriate role to a user. If a particular user logs in to the system using an alias matching to the authorization value set in his role, he gets in, otherwise he gets an error upon logon. So that his logon is only successful if he used the right alias in URL (provided correct login name and password of course).
Question. How do we apply similar scenario in new SRM7?
Is there an authorisation object for java portal in SRM 7.0 - similar to S_ICF object for ABAP portal in SRM 5.0?
Is it possible and how to make an aliases to java portal, or otherwise automatically detrermine at runtime upon logon, which way (which URL or using some parameter in address line) the user has logged in?

This question has been answered by the following blog:
/people/ulli.hoffmann2/blog/2009/10/07/srm-70-running-it-without-the-portal

How can I convert table object into table record format?

I need to write a store procedure to convert table object into table record. The stored procedure will have a table object IN and then pass the data into another stored procedure with a table record IN. Data passed in may contain more than one record in the table object. Is there any example I can take a look? Thanks.

I'm afraid it's a bit labourious but here's an example.
I think it's a good idea to work with SQL objects rather than PL/SQL nested tables.
SQL> CREATE OR REPLACE TYPE emp_t AS OBJECT
2      (eno NUMBER(4)
3      , ename VARCHAR2(10)
4      , job VARCHAR2(9)
5      , mgr NUMBER(4)
6      , hiredate DATE
7      , sal NUMBER(7,2)
8      , comm NUMBER(7,2)
9      , deptno NUMBER(2));
10 /
Type created.
SQL> CREATE OR REPLACE TYPE staff_nt AS TABLE OF emp_t
2 /
Type created.
SQL> Now we've got some Types let's use them. I've only implemented this as one public procedure but you can see the principles in action.
SQL> CREATE OR REPLACE PACKAGE emp_utils AS
2      TYPE EmpCurTyp IS REF CURSOR RETURN emp%ROWTYPE;
3      PROCEDURE pop_emp (p_emps in staff_nt);
4 END emp_utils;
5 /
Package created.
SQL> CREATE OR REPLACE PACKAGE BODY emp_utils AS
2      FUNCTION emp_obj_to_rows (p_emps IN staff_nt) RETURN EmpCurTyp IS
3          rc EmpCurTyp;
4      BEGIN
5          OPEN rc FOR SELECT * FROM TABLE( CAST ( p_emps AS staff_nt ));
6          RETURN rc;
7      END emp_obj_to_rows;
8      PROCEDURE pop_emp (p_emps in staff_nt) is
9          e_rec emp%ROWTYPE;
10          l_emps EmpCurTyp;
11      BEGIN
12          l_emps := emp_obj_to_rows(p_emps);
13          FETCH l_emps INTO e_rec;
14          LOOP
15              EXIT WHEN l_emps%NOTFOUND;
16              INSERT INTO emp VALUES e_rec;
17              FETCH l_emps INTO e_rec;
18          END LOOP;
19          CLOSE l_emps;
20      END pop_emp;
21 END;
22 /
Package body created.
SQL>Looks good. Let's see it in action...
SQL> DECLARE
2      newbies staff_nt := staff_nt();
3 BEGIN
4      newbies.extend(2);
5      newbies(1) := emp_t(7777, 'APC', 'CODER', 7902, sysdate, 1700, null, 40);
6      newbies(2) := emp_t(7778, 'J RANDOM', 'HACKER', 7902, sysdate, 1800, null, 40);
7      emp_utils.pop_emp(newbies);
8 END;
9 /
PL/SQL procedure successfully completed.
SQL> SELECT * FROM emp WHERE deptno = 40
2 /
     EMPNO ENAME      JOB              MGR HIREDATE         SAL       COMM
    DEPTNO
      7777 APC        CODER           7902 17-NOV-05       1700
        40
      7778 J RANDOM   HACKER          7902 17-NOV-05       1800
        40
SQL>     Cheers, APC

Populating a authorisation object at runtime...

Hi,
how to populate a authorisation object at runtime? is it possible to have a variable etc that can be populated a runtime?
I have a object zsales_off which has different values for different users. i need to create separate roles just to have different values for sales office for different users. i would like to avoid this by having a single role with the zsales_off getting populated at runtime.
Details steps with code will be appreciated.
thank you.

Hello AHP,
i am not still very clear about the detailed steps to be carried out as i am a novice in abap.
i have created the authorisation variable and am using it in the query. if i manually assign values for sales office in the role, it is working fine.
i want to assign values at run time. i am confused with the process as such.
few doubts like:
1> the variable should be of "authorisation" processing type or "customer exit" processing type.
2>what to use I_step=0 or I_step =1? how to use? where to use?
3>to write a abap code or use a func module, which one? how to use.
any example(like in my case different sales office values for diffrent users) with DETAILED STEPS & CODE would be appreciated.
also i need to have multiple single values for each user(but not interval).
Please help.

Printing out results in case of object-relational table (Oracle)

I have made a table with this structure:
CREATE OR REPLACE TYPE Boat AS OBJECT(
Name varchar2(30),
Ident number,
CREATE OR REPLACE TYPE Type_boats AS TABLE OF Boat;
CREATE TABLE HOUSE(
Name varchar2(40),
MB Type_boats)
NESTED TABLE MB store as P_Boat;
INSERT INTO House VALUES ('Name',Type_boats(Boat('Boat1', 1)));
I am using java to print out all the results by calling a procedure.
CREATE OR REPLACE package House_boats
PROCEDURE add(everything works here)
PROCEDURE results_view;
END House_boats;
CREATE OR REPLACE Package.body House_boats AS
PROCEDURE add(everything works here) AS LANGUAGE JAVA
Name House_boats.add(...)
PROCEDURE results_view AS LANGUAGE JAVA
Name House_boats.resuts_view();
END House_boats;
However, I am not able to get Results.view working in case of object-relation table. This is how I do it in the situation of relational table.
CALL House_boats.results_view();
House_boats.java file which is loaded using LOADJAVA:
import java.sql.*;
import java io.*;
public class House_boats {
public static void results_view ()
 throws SQLException
 { String sql =
 "SELECT * from House";
 try { Connection conn = DriverManager.getConnection
("jdbc:default:connection:");
 PreparedStatement pstmt = conn.prepareStatement(sql);
 ResultSet rset = pstmt.executeQuery();
printResults(rset);
rset.close();
pstmt.close();
 catch (SQLException e) {System.err.println(e.getMessage());
static void printResults (ResultSet rset)
 throws SQLException { String buffer = "";
 try { ResultSetMetaData meta = rset.getMetaData();
 int cols = meta.getColumnCount(), rows = 0;
 for (int i = 1; i <= cols; i++)
 int size = meta.getPrecision(i);
 String label = meta.getColumnLabel(i);
 if (label.length() > size) size = label.length();
 while (label.length() < size) label += " ";
buffer = buffer + label + " "; }
buffer = buffer + "\n";
 while (rset.next()) {
rows++;
 for (int i = 1; i <= cols; i++) {
 int size = meta.getPrecision(i);
 String label = meta.getColumnLabel(i);
 String value = rset.getString(i);
 if (label.length() > size) size = label.length();
 while (value.length() < size) value += " ";
buffer = buffer + value + " "; }
buffer = buffer + "\n"; }
 if (rows == 0) buffer = "No data found!\n";
 System.out.println(buffer); }
 catch (SQLException e) {System.err.println(e.getMessage());} }
How do I print out the results correctly in my case of situation?
Thank you in advance

I have made a table with this structure:
I am using java to print out all the results by calling a procedure.
However, I am not able to get Results.view working in case of object-relation table. This is how I do it in the situation of relational table.
How do I print out the results correctly in my case of situation?
There are several things wrong with your code and methodology
1. The code you posted won't even compile because there are several syntax issues.
2. You are trying to use/test Java in the database BEFORE you get the code working outside the DB
3. Your code is not using collections in JDBC properly
I suggest that you use a different, proven approach to developing Java code for use in the DB
1. Use SIMPLE examples and then build on them. In this case that means don't add collections to the example until ALL other aspects of the app work properly.
2. Create and test the Java code OUTSIDE of the database. It is MUCH easier to work outside the database and there are many more tools to help you (e.g. NetBeans, debuggers, DBMS_OUTPUT windows, etc). Trying to debug Java code after you have already loaded it into the DB is too difficult. I'm not aware of anyone, even at the expert level, that develops that way.
3. When using complex functionality like collections first read the Oracle documentation (JDBC Developer Guide and Java Developer's Guide). Those docs have examples that are known to work.
http://docs.oracle.com/cd/B28359_01/java.111/b31225/chfive.htm
http://docs.oracle.com/cd/E11882_01/java.112/e16548/oraarr.htm#sthref583
The main issue with your example is #3 above; you are not using collections properly:
String value = rset.getString(i);
A collection is NOT a string so why would you expect that to work for a nested table?
A collection needs to be treated like a collection. You can even treat the collection as a separate result set. Create your code outside the database and use the debugger in NetBeans (or other) on this replacement code for your 'printResults' method:
static void printResults (ResultSet rset) throws SQLException {
 try {
 ResultSetMetaData meta = rset.getMetaData();
 while (rset.next()) {
 ResultSet rs = rset.getArray(2).getResultSet();
 rs.next();
 String ndx = rs.getString(1);
 Struct struct = (Struct) rs.getObject(2);
 System.out.println(struct.getSQLTypeName());
 Object [] oa = struct.getAttributes();
 for (int j = 0; j < oa.length; j++) {
 System.out.println(oa[j]);
 } catch (SQLException e) {
 System.err.println(e.getMessage());
That code ONLY deals with column 2 which is the nested table. It gets that collection as a new resultset ('rs'). Then it gets the contents of that nested table as an array of objects and prints out the attributes of those objects so you can see them.
Step through the above code in a debugger so you can SEE what is happening. NetBeans also lets you enter expressions such as 'rs' in an evaluation window so you can dynamically try the different methods to see what they do for you.
Until you get you code working outside the database don't even bother trying to load it into the DB and create a Java stored procedure.
Since your current issue has nothing to do with this forum I suggest that you mark this thread ANSWERED and repost it in the JDBC forum if you need further help with this issue.
https://forums.oracle.com/community/developer/english/java/database_connectivity
When you repost you can include a link to this current thread if you want. Once your Java code is actually working then try the Java Stored procedure examples in the Java Developer's Guide doc linked above.
At the point you have any issues that relate to Java stored procedures then you should post them in the SQL and PL/SQL forum
https://forums.oracle.com/community/developer/english/oracle_database/sql_and_pl_sql

Authorisation object for "PO text in the material master"

Hi,
My requirement is as below:
"All users can see the Purchase Order Text as usual, but only a few users should be allowed to create / change the PO Long Text.
For other users, the same should appear in display mode only (both in creation & in change mode, MM01 & MM02)."
Please let me know, How to map this.
As per my knowledge thsi is possible only thru authorisation. But I want to know what is the authorisation object for "PO text in the material master" (Pl note that only for PO text in the material master field). we want control on "PO text of material master"
Regards.
Chinna

Hi,
The authorisation object is "M_MATE_MAT", pl check
Regards
Merwyn

Authorisation object on table

Similar Messages

Maybe you are looking for