Authorization Creation

Question

Hi All
I ve an ABAP program which is been used for loading the file from workstation to application server and triggers the process chain, In the ABAP coding,, i need to select the application area and eventid,, this is been maintained in seperate infoobject. The Application area is basically based on different workstream like finance, Manufacturing etc.
When the user runs the ABAP program,, say for example, if that particular user is assigned for Finance, when selecting the file,, he needs to see only Finance related eventids alone, is it posible to set a authorization objects on Info objects and restrict it to the users in ABAP coding??
If yes, please send me the details of how to do it,,
Ill assign points for it,,
Regards
Dinesh,

Answer 1

Hi Dinesh,
In BW we don't have Tcode base authorization, hence we cannot do as we do in R3 (restiction of Tcodes other then his module).
Here with help of roles we provide authorization. In these roles we can restrict user to specific info object/data target/info source/ query/workbook and so on , as per need.
Hence what you can do is that restrict users by info source/ info cubes which are relevent for them for reporting.
Say finance person shall be authorised to change/display only FI info source or info cubes and not SD or MM, as per the scenario.
Procedure:
1.Make info object Auth relevelant by putting cross in check box provided in info object maintenance.
2.Go to RSSM
3.choose Auth object name
4.Select required info object for list
5.if want to restrict this object for perticular data target then choose that also from below
6.Check that you have used info object and data target (you can also provide auth for hierarchy and hierarchy nodes).
7.Now go to PFCG and create a new role or use an existing one which your user is having in his ID.
8.Manully add that object in his auth object list and restrict accordingly, you can check here for other objects (eg cube and info source) if you want to edit them.
9.Generate this and go back, put user id in coulomn on user tab and perss user comperision.
10.Finally save and exit.
this way use do this, also depends on your requirements that how you want to authorize a person for activities.
Hope it helps.
Write for more help if needed.