Authorization coding in custom table

Question

Hi frnds,
   I want to give an authorization to a custom table. I have created a new authorization group and assigned a role and user for it.
   I had done a coding to check the authorization in Maintenance generator program.
MODULE CHECK_AUTHORIZATION OUTPUT.
data : w_tddat like tddat,
       viewname type tabname value 'ZTSD_IB_TRMAP',
       act_level.
select single * from tddat into w_tddat where tabname = viewname.
  if sy-subrc <> 0  or  w_tddat-cclass = space.
    w_tddat-cclass = '&NC&'.           " 'non classified table'
  endif.
  authority-check object 'S_TABU_DIS'  "check by class
      id 'ACTVT'      field '02'
      id 'DICBERCLS'  field w_tddat-cclass.
  if sy-subrc <> 0.                    "not allowed
      authority-check object 'S_TABU_DIS' "check by class
         id 'ACTVT'      field '03'
         id 'DICBERCLS'  field w_tddat-cclass.
      if sy-subrc =  0.
       fupd  = space.
       fshow = 'X'.
       act_level = '03'.
       p_action = 'S'.
        message w106(tb) with viewname."only show allowed
      else.
        message e107(tb) with viewname."no upd auth
      endif.                           "sy-subrc from  2nd auth_check
    else.                              "act_level <> 02
      message e105(tb) with viewname . "no show auth
   endif.
  endif.
ENDMODULE.                 " CHECK_AUTHORIZATION  OUTPUT
But the problem is on debugging even for the unauthorized user the authorization check coding:
  authority-check object 'S_TABU_DIS'  "check by class
      id 'ACTVT'      field '02'
      id 'DICBERCLS'  field w_tddat-cclass.
gives sy-subrc = 0.
What is the problem with the coding.
Also can an one explain me about
       fupd  = space.
       fshow = 'X'.
       act_level = '03'.
       p_action = 'S'.
and what are the datatypes to be given for it on data declaration.
Thanks in Advance

Answer 1

>
neethu wrote:
> I have created a Z table and I need to create and assign an Authorization group to the table. The requirement is like, say, if there are 10 users who belong to this particluar Authorization group, then 5 users should be given display and change authorization. And the remaining 5 users should be given only display authorization & no change authorization.
>
Assuming users are accessing the table content using SM30 (or SM30 parameterised transaction) you can use authority object S_TABU_DIS to control change mode. User who are suppose to change content should have authority object S_TABU_DIS with following values in their role.
S_TABU_DIS
ACTVT = 02
DICBERCLS = AUTH_GRP
for display only
S_TABU_DIS
ACTVT = 03
DICBERCLS = AUTH_GRP
Where AUTH_RP is authorization group assigned to table
Regards,
Pawan.
Edited by: Pawan Kesari on Aug 9, 2010 4:17 PM