Authority object check
Hello All,
I have created an authority check object for company code in SU21 and used the same in a program.Now i need to test it.How can i test it from my user id.I dont know for which all company codes do i have authorization.I want to know where to maintain this info.
Thanks,
Rakesh.
Hi Rakesh,
Get the authorization object assigned to user id by basis people and test if its working for you keeping the debugger in the program where it is entering into that condition or not.
Or you can also get few test user id's created and assign the authorization objects and test it accordingly.
Hope this helps.
Regards,
Rashmi
Similar Messages
-
How to find Authority Object before it is checked.
Hi All,
Is there a table or FM that I can use to read authority object for user?
Thanks
Edited by: Julius Bussche on Jan 1, 2009 1:33 PMFor some object (particularly those checked automatically by the kernel) there are function modules available to check the authority of the user in your program, before the system does it anyway (and usually dumps if the authority is missing at runtime anyway).
Take a look at the FM's starting with AUTHORITY_CHECK* --> F4 in SE37.
Eg. AUTHORITY_CHECK_TCODE, AUTHORITY_CHECK_DATASET, etc. There might also be an AUTHORITY_CHECK_USERSTAT... not sure though...
Cheers,
Julius -
Authority Object? Authorization Check for Period
We consolidated from R3 to SEM tax reporting. So we now are using a different authority-check object. However, all of the parameters that were in the 'Authorization Check for Period' in R3 are not in SEM. Can you manually add parameters for to the authority-check. I am not even sure how to change or activate. Is this a Basis thing?
To be honest I do not know what this object checks when processing. It cannot be debugged?
I do not think my authorization level will be fully defined with the new object.
Any suggestions?
Thanks.
*In old ERP we used*
AUTHORITY-CHECK OBJECT 'E_CS_PERMO'
ID 'PERMO' FIELD '1' "Open period
ID 'DIMEN' FIELD g_dimen
ID 'RVERS' FIELD g_rvers
ID 'BUNIT' DUMMY
ID 'CONGR' FIELD g_congr.
In new SEM system we now need to use:
AUTHORITY-CHECK OBJECT 'R_UC_PERIO'
ID 'ACTVT' FIELD 'PA' "open period
ID 'CONS_AREA' FIELD g_congr.
ID 'TASK_FLD1' FIELD '__________'
ID 'TASK_FLD2' FIELD '__________'
ID 'TASK_FLD3' FIELD '__________'
ID 'TASK_FLD4' FIELD '__________'
ID 'TASK_FLD5' FIELD '__________'
ID 'TASK_FLD6' FIELD '__________'
ID 'TASK_FLD7' FIELD '__________'
ID 'TASK_FLD8' FIELD '__________'.Resolved issue.
-
Problem during creation of authority object
Hi All,
I am trying to do authority object of standart report RFASLDPC but when I am giving authorization object in authorization object field (Bcoz requirment is this transaction code for perticular company code)then it is following error/warning 'check object has not been maintained.'
Could you please tell me what is the remedy for that?
Regards,
Amar.Hi,
I think you should check if the authorty object that you are using has been created you can try to use transaction su21, i think the authority object that you are trying to use does not exist.
Check the below link for more info
LINK[ Auth Objects |http://help.sap.com/saphelp_nw04/helpdata/EN/80/1a6859e07211d2acb80000e829fbfe/content.htm]
Regards,
Himanshu -
How to use custom authority object to execute certain code?
Hi Gurus,
I'm trying to use an authority-check just to execute certain ABAP code for some roles only, but I don't get to make it work as every user gets to exectute the code. I'm also not sure of which field(s) I should add to my authorization object when I'm checking it.
Does anyone know if there's a way of making it? Thanks in advance.
Edited by: Jorge Gonzalez on Jun 25, 2010 11:42 AMHi.
If the authority object is already created then you can view in transaction SU21, Select the custom object and double click on it.
You can see the Authorization fields that need to be passed to the authorization object while using.
For eg: If you see BUKRS, then you need to pass the company codes relevant so the authority check is performed
All Authority object has activity which informs the operation to be performed. for eg:
ACTVT: Activities.
01 = Create
02 = Change
03 = Display
06 = Delete
07 = Activate
10 = Post
Also check for documentation if it is available, if so it makes life easy.
Hope this helps
Regards
Shiva -
Authority Objects to read HR FM BAPI_ORGUNITEXT_DATA_GET
Hello gurus,
i want to run only FM BAPI_ORGUNITEXT_DATA_GET through a SAP User ID, i assigned some Authority Objects to it but its not returining anything if i run it through other user using same parameters its showing me the data. i assigned S_DEVELOP the FM and Function group of the FM, it has access to all the infotypes P_ORGIN-all, S_DEVELOP - All tables, P_PERNR - all, S_RFC-the selected FUGR and SYST function group, P_ABAP -all.
Do you guys think i am still missing something, to view the FM output.
In the same user I am getting output from FM BAPI_EMPLOYEE_GETDATA. using these objects.
NOTE: the user dont have any other objects assigned to it, apart from the specified here. (Though i assigned se37 for testing purpose).
i will really appreciate your reply on the same.
thanks in advance
ManiSorry - meant PLOG. I haven't checked the FM in any depths, but you if you pass object type O to the FM, this is the object type you will need to assign.
The PLOG could look like this:
Infotype 1000, 1002 (you could put * here)
Planning status 1 (presuming this is what you use)
Object type O
Plan version 01 (or whatever is your active plan version)
Function code DISP, LISD (assuming you only want to see)
Subtype *
You may need other obejct types in the authorization object. If you use structural authorizations, they have to be in place as well. Consider that the authorization object defines what data your are allowed to read. Structural Authorizations decides where in the org.structure you can read those data.
Your best way forward may be to got to SE37 and test the FM. Then directly after (if it fails to deliver) go to SU53 and check the authorizations.
No - you should not have to assign the transaction codes.
Hope this helps.
I may have misunderstood the usage of the FM. I am basing my answer on the fact that it reads OM. -
Probem with CRM_ORD_OP authority object
Hello friends,
I facing a problem with CRM_ORD_OP authority object.
I have set a pfcg profile as below, but I dont know why, CRM is not performing authority check for object CRM_ORD_OP, so user are able to create documents, but they could not find them.
CRM_ORD_PR: PR_TYPE 'Z021',ACTVT '*'
CRM_ACT: ACTVT u2018*u2019
CRM_ORD_OP: ACTVT '*', PARTN_FCT 'Z0000021', PARTN_FCTT '0008'
CRM_ORD_OP: ACTVT '*', PARTN_FCT 'Z0000022', PARTN_FCTT 'Y030'
CRM_ORD_OP: ACTVT '*', PARTN_FCT 'Z0000023', PARTN_FCTT 'Y030'
CRM_ORD_OP: ACTVT '*', PARTN_FCT 'Z0000024', PARTN_FCTT 'Y030'
CRM_ORD_OP: ACTVT '*', PARTN_FCT 'Z0000025', PARTN_FCTT 'Y030'
CRM_ORD_OP: ACTVT '*', PARTN_FCT 'Z0000027', PARTN_FCTT 'Y030'
CRM_ORD_OP: ACTVT '*', PARTN_FCT 'Z0000028', PARTN_FCTT 'Y030'
CRM_ORD_OP: ACTVT '*', PARTN_FCT 'Z0000029', PARTN_FCTT 'Y030'
CRM_ORD_OE: SERVICE_OR u2018u2019, DIS_CHANNE u2018u2019, SALES_OFFI u2018u2019, SALES_GROU u2018u2019, ACTVT = u2018*u2019
What I want to do it is simple. I want that users can access only their own documents.
Does anybody know what going on?
Regards,
Lalasproblem resolved
-
Hi,
Could you please help out how to create AUTHORITY OBJECT and usage in reports with sample code and transaction codes.
Thanks,
MadhuHi Madhu,
DATA:wa_flight TYPE t_flight,
it_flights TYPE t_flighttab.
SELECT-OPTIONS so_carr FOR wa_flight-carrid.
for authority-check:
DATA:
allowed_carriers TYPE RANGE OF t_flight-carrid,
wa_allowed_carr LIKE LINE OF allowed_carriers.
START-OF-SELECTION.
fill a range table with the allowed carriers:
SELECT carrid
FROM scarr
INTO wa_allowed_carr-low
WHERE carrid IN so_carr.
AUTHORITY-CHECK OBJECT 'S_CARRID'
ID 'CARRID' FIELD wa_allowed_carr-low
ID 'ACTVT' FIELD '03'. " display
IF sy-subrc <> 0.
CLEAR wa_allowed_carr.
ELSE.
wa_allowed_carr-sign = 'I'.
wa_allowed_carr-option = 'EQ'.
APPEND wa_allowed_carr TO allowed_carriers.
ENDIF.
ENDSELECT.
check this link
http://techrepublic.com.com/5100-6329_11-5110893.html#
http://www.sap-img.com/ab035.htm
Regards,
Sridhar -
Is it possible to give multiple values to the field of the Authority object.
For example
AUTHORITY-CHECK OBJECT 'M_MATE_WRK'
ID 'ACTVT' FIELD '03'
ID 'WERKS' FIELD : '0002', '1030', 2700'.
IF SY-SUBRC <> 0.
WRITE : 'No authorization'.
ENDIF.
Is it possible to give mulitple values for the field WERKS.hi,
it is possible to give authority for more than on field.
program an AUTHORITY-CHECK.
AUTHORITY-CHECK OBJECT <authorization object>
ID <authority field 1> FIELD <field value 1>.
ID <authority field 2> FIELD <field value 2>.
ID <authority-field n> FIELD <field value n>.
The OBJECT parameter specifies the authorization object.
The ID parameter specifies an authorization field (in the authorization object).
The FIELD parameter specifies a value for the authorization field.
The authorization object and its fields have to be suitable for the transaction. In most cases you will be able to use the existing authorization objects to protect your data. But new developments may require that you define new authorization objects and fields.
regards,
satish,
reward points. -
Query regarding Authority object
Hello Friends;
I just wanna know why we check authorization on selection screen and What do u mean by authority objects?, Who creates It? What is the purpose behind creating it?? What transactions are there relating authority objects in SAP??
And one more query is there
See when we call any function module there are several parameters that it contains such as importing ,exporting, tables and exceptions ?? What is the exact use of exception parameters in that? How to handle those exception ...Is it before calling that function module or after ?? What is the syntax for it??
Regards;
ParagException are like errors so to use that in the FM we use raise command .
Authorization is required ,assume u in Quality department and you are trying to execute a SD dept report which is as per rules not allowed so for that in abap we use Authorization object .
Use this program for understanding DEMO_AUTHORITY_CHECK
Transaction SU21 .
PLease reward if useful. -
Hi all,
I need to check bw authority object in ABAP program.
Does anyone having idea of this?
ThanksHello Irina,
You can use this code:
AUTHORITY-CHECK OBJECT '[AUTH_OBJECT_NAME]'
ID 'ACT_GROUP' FIELD [FIELD_NAME]
ID 'ACTVT' FIELD '[ACTIVITY_VALUE]'.
IF sy-subrc NE 0.
IF message_output = 'X' .
[CUSTOM ERROR MESSAGE]
ENDIF.
RAISE not_authorized.
ENDIF.
Have a look at Function Module PRGN_AUTH_ACTIVITY_GROUP (I believe it's the one that is usually used by SAP programs) for examples.
Hope it helps,
Sebastien Francal -
Custom authority object on MRBR
Hello,
Can I create a custom authority object and assign the same to standard t.code MRBR?
Currently MRBR is offering authority check based on EKGRP. But this is not catering to our requirements. We want to restrict the authorisation based on EKORG (Purchase Organisation) also. This is particularly for Releasing of blocked invoice.
Any ides on this matter please......
Thanks in advance,
MallikHello,
You need to have
M_BEST_EKO : Purchasing Organization in Purchase Order
M_RECH_EKG :Invoice Release: Purchasing Group
M_RECH_SPG: Invoices: Blocking Reasons
Please check in SU24 whether these are maintained or not,if not please main them .
In the transcation code MRBR for your requirement
Thanks,
Prasant K Paichha
Edited by: Prasant K Paichha on Aug 26, 2009 5:19 PM -
Hallo guys,
have you ever used a custom authority object within a standard transaction code?
I need to use a custom authority check in VA01/02/03, is that possible?
Thanx!Hi mike,
1. Thats not directly possible.
2. we have to Modify the original source code,
(by taking access key)
3. Only then its possible.
regards,
amit m. -
If One Authority Object used in the Z report and that Authority object added in the role. This Role assigned to Two user.
But one of the user not required authorization for the Z report.
How actually this situation ideally handle ? New authority object need to create for that Z report or using the existing object we can solve the problem.
Regards
Nilesh Shetethen dont give authorization for this report(tcode) itself, and in ur program u have to check for the same.
<b> call function 'AUTHORITY_CHECK_TCODE'
exporting
tcode = 'YSCC'
exceptions
ok = 0
not_ok = 2.
if sy-subrc eq 2.
message e077(s#) with 'YSCC'. " No authorization to transaction
endif.</b>
if u want to create one more role,then no nedd to change ur program.
Regards
Prabhu -
Hello freinds,
I have inserted authority object in z program, how can I test the program whether the user is authorized to carry out the transaction or not???Hi Amar,
Please place a brreak-point at the statement "AUTHORITY-CHECK" and execute the program.
If you have authrization then sy-subrc will be set to zero else some different value.
Regards,
Babul.
Maybe you are looking for
-
Toshiba portege model A605-P200 won't POST bios unless I take out the battery and put it in again
toshiba portege model A605-P200 won't POST bios unless I take out the battery and put it in again though, at times, it will, generally all i get is a flashing cursor NO toshiba splash screen. this seems to have started as an unsucessful window
-
If you saved your photos to a computer can you get them back on your phone?
i saved all my photos to my computer for space but now i want them back on my phone how can i get thme back?
-
Authentication to CR and Xcelsius
Hi All, What authentication mechanisms are supported by Crystal reports and Xcelsius when connected to Web Serves, i.e. WSE3.0/WCF etc In what scenarions Win AD will work for Crystal reports and Xcelsius. Is it possible to setup WinAD SSO for custom
-
Adding An iCloud email address
I want my daughter to have her own apple ID and email address. Can she have one under my account? If so how?
-
Cannot open old Appleworks spreadsheet document
I've got an old spreadsheet document created/modified in 1997 that won't open in Appleworks or Numbers. I get "an I/O error occurred". I have several other similar documents that were created in 1999 and later, and they all open. Any hints on how to