Authority object in sap

hai, i create a authority object, with fields etc for program. it has got activity '03', means DISPLAY.
in SU01, Profile SAP_ALL is taken.(SAP_ALL means all authorization granted, i think).
now, does it mean inspite of having DISPLAY activity,because of SAP_ALL i have activity to CHANGE the program?

Dear Shiva,
SAP_ALL will grant you complete authorization. Hence, you should be able to change as well if SAP_ALL is assigned to your user id.
Hope this will help.
Regards,
Naveen.

Similar Messages

Query regarding Authority object

Hello Friends;
I just wanna know why we check authorization on selection screen and What do u mean by authority objects?, Who creates It? What is the purpose behind creating it?? What transactions are there relating authority objects in SAP??
And one more query is there
See when we call any function module there are several parameters that it contains such as importing ,exporting, tables and exceptions ?? What is the exact use of exception parameters in that? How to handle those exception ...Is it before calling that function module or after ?? What is the syntax for it??
Regards;
Parag

Exception are like errors so to use that in the FM we use raise command .
Authorization is required ,assume u in Quality department and you are trying to execute a SD dept report which is as per rules not allowed so for that in abap we use Authorization object .
Use this program for understanding DEMO_AUTHORITY_CHECK
Transaction SU21 .
PLease reward if useful.

How to find out in which role an authority object is included

Hi,
I need to call web services by an external application. Therefore the authorization object S_SERVICE is needed to call services.
Now I want to add this object to a specific sap user, but how can I find out in which role this object is included? I don't want to create a new role for just only this standard SAP authority object.
Thank you!

>
Torben Larsen wrote:
> Hey!
>
> Thank you for your answer. I have now found roles, which include this object. But I still have the authorization problems and can see that the object S_SERVICE is the problem, when tracing with ST01.
>
> I'm not that much into authorization stuff. So do I need also a profile? I only could call the web services by using profile SAP_ALL.
>
> thank you!
Now that you have required role with you .. simple assign that role to user id from transaction SU01 (Roles tabs).
Sap standard roles will already have profile in it. You might have to generate the profile. Goto transaction PFCG enter role name hit display button , goto Authorisation tab, hit Display Authorisation button and on next screen press generate button (Shift+f5).
By the way you can use SUIM to find role and profile for given authority object

Problem during creation of authority object

Hi All,
I am trying to do authority object of standart report RFASLDPC but when I am giving authorization object in authorization object field (Bcoz requirment is this transaction code for perticular company code)then it is following error/warning 'check object has not been maintained.'
Could you please tell me what is the remedy for that?
Regards,
Amar.

Hi,
I think you should check if the authorty object that you are using has been created you can try to use transaction su21, i think the authority object that you are trying to use does not exist.
Check the below link for more info
LINK[ Auth Objects |http://help.sap.com/saphelp_nw04/helpdata/EN/80/1a6859e07211d2acb80000e829fbfe/content.htm]
Regards,
Himanshu

Authority Objects to read HR FM BAPI_ORGUNITEXT_DATA_GET

Hello gurus,
   i want to run only FM BAPI_ORGUNITEXT_DATA_GET through a SAP User ID, i assigned some Authority Objects to it but its not returining anything if i run it through other user using same parameters its showing me the data. i assigned S_DEVELOP the FM and Function group of the FM, it has access to all the infotypes P_ORGIN-all, S_DEVELOP - All tables, P_PERNR - all, S_RFC-the selected FUGR and SYST function group, P_ABAP -all.
Do you guys think i am still missing something, to view the FM output.
In the same user I am getting output from FM BAPI_EMPLOYEE_GETDATA. using these objects.
NOTE: the user dont have any other objects assigned to it, apart from the specified here. (Though i assigned se37 for testing purpose).
i will really appreciate your reply on the same.
thanks in advance
Mani

Sorry - meant PLOG. I haven't checked the FM in any depths, but you if you pass object type O to the FM, this is the object type you will need to assign.
The PLOG could look like this:
Infotype               1000, 1002 (you could put * here)
Planning status    1 (presuming this is what you use)
Object type          O
Plan version         01 (or whatever is your active plan version)
Function code      DISP, LISD (assuming you only want to see)
Subtype              *
You may need other obejct types in the authorization object. If you use structural authorizations, they have to be in place as well. Consider that the authorization object defines what data your are allowed to read. Structural Authorizations decides where in the org.structure you can read those data.
Your best way forward may be to got to SE37 and test the FM. Then directly after (if it fails to deliver) go to SU53 and check the authorizations.
No - you should not have to assign the transaction codes.
Hope this helps.
I may have misunderstood the usage of the FM. I am basing my answer on the fact that it reads OM.

Usage of AUTHORITY OBJECT

Hi,
Could you please help out how to create AUTHORITY OBJECT and usage in reports with sample code and transaction codes.
Thanks,
Madhu

Hi Madhu,
DATA:wa_flight TYPE t_flight,
it_flights TYPE t_flighttab.
SELECT-OPTIONS so_carr FOR wa_flight-carrid.
for authority-check:
DATA:
allowed_carriers TYPE RANGE OF t_flight-carrid,
wa_allowed_carr LIKE LINE OF allowed_carriers.
START-OF-SELECTION.
fill a range table with the allowed carriers:
SELECT carrid
FROM scarr
INTO wa_allowed_carr-low
WHERE carrid IN so_carr.
AUTHORITY-CHECK OBJECT 'S_CARRID'
ID 'CARRID' FIELD wa_allowed_carr-low
ID 'ACTVT' FIELD '03'. " display
IF sy-subrc <> 0.
CLEAR wa_allowed_carr.
ELSE.
wa_allowed_carr-sign = 'I'.
wa_allowed_carr-option = 'EQ'.
APPEND wa_allowed_carr TO allowed_carriers.
ENDIF.
ENDSELECT.
check this link
http://techrepublic.com.com/5100-6329_11-5110893.html#
http://www.sap-img.com/ab035.htm
Regards,
Sridhar

Z OBJECTS in SAP

Hi guys!
I´ll appreciate your help. I need to get all the Z Objects in SAP that we have right now in ouir system. How can I do that? I've heard about TADIR Table, but how will I know if there is an Include, or Classes, or Interfases etc etc?
Could you please help me with this?
Thanks and regards,
Gabriela.

Hi,
check on TADIR objects
AUTHOR NE 'SAP' OR 'DDIC'
DEVCLASS NE '$TMP' <---- If you want only transportable objects
OR DEVCLASS EQ 'Z*' <---- Transportable custom objects
Fields PGMID and OBJECT give you the object category for example
TTYP => Table Type
DTEL => Data element
REPS => Repo source code
Check also PROGDIR using the field SUBC
1     Executable program
I     INCLUDE program
M     Module Pool
F     Function group
S     Subroutine Pool
J     Interface pool
K     Class pool
T     Type Pool
X     XSLT Program
Regards,
Ivan

Cheking bw authority object

Hi all,
I need to check bw authority object in ABAP program.
Does anyone having idea of this?
Thanks

Hello Irina,
You can use this code:
      AUTHORITY-CHECK OBJECT '[AUTH_OBJECT_NAME]'
                   ID 'ACT_GROUP' FIELD [FIELD_NAME]
                   ID 'ACTVT' FIELD '[ACTIVITY_VALUE]'.
    IF sy-subrc NE 0.
      IF message_output = 'X' .
        [CUSTOM ERROR MESSAGE]
     ENDIF.
      RAISE not_authorized.
    ENDIF.
Have a look at Function Module PRGN_AUTH_ACTIVITY_GROUP (I believe it's the one that is usually used by SAP programs) for examples.
Hope it helps,
Sebastien Francal

Authorisation Objects in SAP PM

Hi,
    I am in need of Authorisation Objects for SAP PM. Kindly let me know.
Regards,
Maheswaran.

hi
check this
I_ILOA     Change location- and accounting data in the order
I_CCM_ACT Configuration Control authorization object
I_ALM_ME   Mobile Asset Management
I_VORG_MEL PM/QM: Business Operation for Notifications
I_QMEL     PM/QM: Notification Types
I_BEGRP    PM: Authorization Group
I_BETRVORG PM: Business Operation
I_VORG_MP PM: Business Operation for Maintenance Planning
I_VORG_ORD PM: Business Operation for Orders
I_KOSTL    PM: Cost Centers
I_INGRP    PM: Maintenance Planner Group
I_IWERK    PM: Maintenance Planning Plant
I_SWERK    PM: Maintenance Plant
I_AUART    PM: Order Type
I_SOGEN    PM: Permit
I_ROUT     PM: Task List
I_ROUT1    PM: Task Lists by PM Planning Plant, Work Scheduler, Status
I_TCODE    PM: Transaction Code
I_CCM_STRC Structure gap maintenance authority
I_WPS_MEB WPS: Maintenance Event Builder
I_WPS_REV WPS: Revision authorization object
you can get this from SU21 select the required module and you will have these objects

Authority Object Table name

Hi All,
is there any method to find out the Authority object Relation to table-field name.,like M_MATE_WRK has relation with fieldname WERKS in table MARA.
I dnt want to use and custom authorization and link with it any table.
Regards,
Anuj jain

Dear Gautam,
Agree with you as many table can be linked with this but in this case i want all these linked tables...is this possible ?
For Tables Ref i have this link whose tables i used already for my requirement.
http://abaplovers.blogspot.com/2008/07/sap-authorization-objects-tables.html
Regards,
Anuj

Authority object S_TABU_NAM

Hi all,
     In my SAP system, the authority object 'S_TABU_NAM' does not exist.
     It only has S_TABU_CLI, S_TABU_DIS, S_TABU_LIN, S_TABU_RFC.
     WHY?
Thanks
Kical

Hi Kical,
       I can see in my system, you may need to check with your BASIS Team.
Thanks
Hock Lin

MAximum number of authorization fields in an authority object

What is the maximum number of authorization object in an authority object ?

An authorization object comprises up to 10 authorization fields.
Read [AUTHORITY-CHECK|http://help.sap.com/abapdocu_70/en/ABAPAUTHORITY-CHECK.htm], look also at [SU21|http://help.sap.com/abapdocu_70/en/ABENBC_AUTHORITY_CHECK.htm] transaction screen.
Regards,
Raymond

Authority objects and tcodes

Hi!
In SAP, there is a table, called AGR_1251.
In SE16, I give the OBJECT field, the S_TCODE value.
Now I can see that there are a lot of combination, to give a transaction code to an authority object within the table's low and high columns.
I mean, if I'm interested in checking the "XD01" transaction, there could be many possible cases which makes the "XD01" transaction correct, like
- XD01
- XD00 - XD02
- XD0*
- XD*
- XD00 - XD99
All of these intervals, and * values are good for the XD01 transaction.
I would like to find a function module, which can tell me those entries, where the XD01 transaction fit. Is there one?
Thank you
Tamá

Hi Tamas,
1. One way of doing this is :
a) select the required records from this table
   with your conditions
   and OBJECT = 'S_TCODE'.
b) Here u will get some records.
c) take another RANGE variable
d) loop at the above internal table found in (a),
    and populate the range variable with LOW and HIGH,
   and also sign = 'I' and option = 'BT'.
e) then using the variable on screen,
   u can check
   If variable IN Range.
*--- means right to tcode.
endif.
regards,
amit m.

Error : while converting a WD ABAP object into SAP Transaction

Hi,
I am trying to converting a WD ABAP object into SAP Transaction but i am getting the following error while executing the transaction :
Network Access Message: The page cannot be displayed
Technical Information (for Support personnel)
Error Code: 502 Proxy Error. The specified Secure Sockets Layer (SSL) port is not allowed. ISA Server is not configured to allow SSL requests from this port. Most Web browsers use port 443 for SSL requests. (12204)
IP Address: 10.114.6.144
Date: 4/7/2011 10:41:
Please help.

> ISA Server is not configured to allow SSL requests from this port. Most Web browsers use port 443 for SSL requests. (12204)
This seems to be your specific network configuration. It seems that your corporate network is blocking HTTPS requests which don't use port 443. Your ABAP system is configured to use a port other than 443. Either talk to your basis admins about changing your ABAP system configuration to use port 443 or talk to your network administrators to allow whichever port the ABAP system is running on.

How to upload data into SAP BW Info Objects using SAP XI

Hi,
I need to upload master and hierarchy data into SAP BW Info Objects using SAP XI as EAI.
Can anyone suggest me the best solution to do it.
Thanks in Advance,
Volker.

Hi! Have you not checked the BW-XI Integration document? It is available on the main page of the SDN section for XI. Almost all the steps for the integration are there...

Authority object in sap

Similar Messages

Maybe you are looking for