Authorization for Table Maintance

Hi friends,
i need some help ....
i created table maintanence.Now all users are creating and deleting table entries.
wht is my problem is ..
Only particular users will do create and change .....and remaining users will use for display.
How i can set it ...Plaese tell me...the steps.
thanks,
kumar

hai,
it may help u.
In general different users will be given different authorizations based on their role in the orgn.
We create ROLES and assign the Authorization and TCODES for that role, so only that user can have access to those T Codes.
USe SUIM and SU21 T codes for this.
Much of the data in an R/3 system has to be protected so that unauthorized users cannot access it. Therefore the appropriate authorization is required before a user can carry out certain actions in the system. When you log on to the R/3 system, the system checks in the user master record to see which transactions you are authorized to use. An authorization check is implemented for every sensitive transaction.
If you wish to protect a transaction that you have programmed yourself, then you must implement an authorization check.
This means you have to allocate an authorization object in the definition of the transaction.
For example:
program an AUTHORITY-CHECK.
AUTHORITY-CHECK OBJECT <authorization object>
ID <authority field 1> FIELD <field value 1>.
ID <authority field 2> FIELD <field value 2>.
ID <authority-field n> FIELD <field value n>.
The OBJECT parameter specifies the authorization object.
The ID parameter specifies an authorization field (in the authorization object).
The FIELD parameter specifies a value for the authorization field.
The authorization object and its fields have to be suitable for the transaction. In most cases you will be able to use the existing authorization objects to protect your data. But new developments may require that you define new authorization objects and fields.
http://help.sap.com/saphelp_nw04s/helpdata/en/52/67167f439b11d1896f0000e8322d00/content.htm
To ensure that a user has the appropriate authorizations when he or she performs an action, users are subject to authorization checks.
Authorization : An authorization enables you to perform a particular activity in the SAP System, based on a set of authorization object field values.
You program the authorization check using the ABAP statement AUTHORITY-CHECK.
AUTHORITY-CHECK OBJECT 'S_TRVL_BKS'
ID 'ACTVT' FIELD '02'
ID 'CUSTTYPE' FIELD 'B'.
IF SY-SUBRC <> 0.
MESSAGE E...
ENDIF.
'S_TRVL_BKS' is a auth. object
ID 'ACTVT' FIELD '02' in place 2 you can put 1,2, 3 for change create or display.
The AUTHORITY-CHECK checks whether a user has the appropriate authorization to execute a particular activity.
This Authorization concept is somewhat linked with BASIS people.
As a developer you may not have access to access to SU21 Transaction where you have to define, authorizations, Objects and for nthat object you assign fields and values. Another Tcode is PFCG where you can assign these authrization objects and TCodes for a profile and that profile in turn attached to a particular user.
Take the help of the basis Guy and create and use.
Sy-SUBRC values
4 User has no authorization in the SAP System for
 such an action. If necessary, change the user
 master record.
8 Too many parameters (fields, values). Maximum
 allowed is 10.
12 Specified object not maintained in the user
 master record.
16 No profile entered in the user master record.
24 The field names of the check call do not match
 those of an authorization. Either the
 authorization or the call is incorrect.
28 Incorrect structure for user master record.
32 Incorrect structure for user master record.
36 Incorrect structure for user master record.
check links.
http://help.sap.com/saphelp_nw04/helpdata/en/cf/21ed2d446011d189700000e8322d00/content.htm
http://help.sap.com/saphelp_46c/helpdata/en/a7/5133ac407a11d1893b0000e8323c4f/frameset.htm
/message/2831202#2831202 [original link is broken]
sowjanya.b

Similar Messages

Reg : Tcode for table maintance generator

Hello,
I have created the Tcode for Table maintance generator of a table using SE93 which directly goes to the table maintaince generator. My requirement is if i open the tcode i need to display the custom selection screen before going to the table maintaince generator. How do i do it. please can give me the steps to fulfil the above req.
regards
haritha

Check below thread will be useful to you.
Re: Sending Payment Advice as Email to Vendors
For more information:
Search sdn with key words tcode + table maintainence generator
Regards

Authorization to Table & Report

Hi
Can anyone please let me know to set authorization to Table and Reports in SAP .
Thank you.

Hi Ravi,
Give access to transactions:
SA38 for Report programs
SM30 for Tables.
The 2 main objects cheked mainly are:
S_DEVELOP
S_TABU_DIS, respectively.
S_DEVELOP:
This contains the following fields:
Development class for transport system: Development class for which a user is authorized.
Development object ID: Object types for which a user is authorized.
Node name: Name of the programs or other types of objects, for which the user has authorization (also generic).
Authorization group with ABAP programs: Valid authorization groups for ABAP programs and associated objects. If you are not using your own authorization groups, you should set this field to the value *.
Activity: Operations that a user can perform.
S_TABU_DIS:
The object contains the following fields:
Authorization group for DD objects: Authorization for tables by authorization class according to table TDDAT.
Enter the name of the allowed classes. Table classes are defined in table TDDAT.
Activity: Allowed operations.
Hope it helps.
Please award points if it is useful.
Thanks & Regards,
santosh

Authorization for a custom programme

How to do Authorization for Custom Transactions?
Can we directly put Authorization Object name in SE93?
What should be the default values? How can we authorize - User Input values in Program T-Code?
How to do Authorization for Custom Programs?
     This is usually done by incuding:
     AT SELECTION-SCREEN .
     AUTHORITY-CHECK OBJECT 'F_RE_TRANS' ID1 Authorization field1      FIELD1 Authorization field value1
                                   ID2 Authorization field2      FIELD2 Authorization field value2
      IF sy-subrc = 4.
              Display No Authorization error
     ENDIF.
If we donot want to pass the Authorization field - Activity Code ACTVT as Display/Change/Create etc., what should be passed in ACTVT, can we leave it ' ' ?
How to do Authorization for Table Maintainance Transactions?
Can we directly put Authorization Object name in SE11 Table Maintainance Generator?
If how to determine Authorization Group?
What should be the default values?
How can we authorize - User Input values in Table maintainance T-Code?
Can we use transaction SU22? If so how?

Hi Friend,
SU21- for creating authorization object
SU20 - for creating authorization field and assign with authorization object
SU22 - maintain authorization agianst transactions
Execute these transactions or see any standard object you will understand everything.
Regards
Krishnendu

Authorization object for table

Hi All,
I have created a table in Se11 and not allowing maintance generator.
Can any one please suggest if I am not allowing table maintaince then how I can attach authorization object to the tabe.
Thanks,
Sandeep.

Hi sandy,
1. I am not allowing table maintaince
    If u are not allowing the table for maintenance,
   then authorisation group is NOT REQUIRED.
2. Authorisation group is required only,
   in case where we allow table maintenance thru sm30.
(other wise there is no use of authorisation group for table)
regards,
amit m.

About Table Maintance for An Table

Hi All
i would like create Table maintance for an table.kindly explain me how to create table maintance for an table...and what is the actual purpose of table maintance..
Thanks in advance.

Hi Joe,
Table maintanance Generator is used to manually
input values using transaction sm30
follow below steps
1) go to se11 check table maintanance check box under
attributes tab
2) utilities-table maintanance Generator->
create function group and assign it under
function group input box.
also assign authorization group default &NC& .
3)
select standard recording routine radio in table
table mainitainence generator to move table
contents to quality and production by assigning
it to request.
4) select maintaience type as single step.
5) maintainence screen as system generated numbers
this dialog box appears when you click on create
button
6) save and activate table
http://help.sap.com/saphelp_nw04/helpdata/en/cf/21ed2d446011d189700000e8322d00/content.htm
http://help.sap.com/saphelp_46c/helpdata/en/a7/5133ac407a11d1893b0000e8323c4f/frameset.htm
/message/2831202#2831202 [original link is broken]
One step, two step in Table Maintenance Generator
Single step: Only overview screen is created i.e. the Table Maintenance Program will have only one screen where you can add, delete or edit records.
Two step: Two screens namely the overview screen and Single screen are created. The user can see the key fields in the first screen and can further go on to edit further details.
Plzz reward if it is useful,
Mahi.

Report S_ALR_87013105 : no authorization for the report/ table 7KU6_001

Hi Gurus,
While executing the program S_ALR_87013105 (Detailed Reports
For Sales Order : Plan/Actual Comparison ) system showing the selection log.
"Have no authorization for the report/table 7KU6_001 and 7KU6_002".
But for the user the authorization check through SU53 was successful.
Pl can any one suggest on this issue.
Thanks in advance,
Vijay

Hi,
Contact your basis consultant to provide the missing authorisation. This is one of the authorisation object.
Regards,
Sankar

Authorization at Company Code Level for table FEBKO

Hello Experts,
I need to add authorization check on my report program that accesses and displays data from table FEBKO. However the user should only be able to access the data of table FEBKO particular only for their company code. How can I apply this? Thanks in advance for all your responses!
Best Regards,
Kurtt

Hi,
if it is in your own report, you can define your own authorization object with field for company code. Check transaction SU21 or ask your security guy. Then you will check if an user have authorization for this object.
Cheers

Display authorization for particular line of table

Hi Experts,
I have a Z table contains sales area data. I want to display those records only which user has authorization for the sales area. It is possible through the table maintenance event or there is any other way to achieve this.
Quick response will be appreciated.
Thanks in advance for your sincere help.
Cheers,
Anil

Hi Anil,
Yes,Its possible through table maintainance event itself.
Only thing u need to do is check for the sales area the user is authorized..using
FM: SUSR_USER_AUTH_FOR_OBJ_GET
SEL_OBJECT:- CRM_ORD_OE.
Hope it helps!!
Regards,
PePe

Authorization for all the maintenance views from one table

I have one table with data related to 5 systems.
I have created views with related data for each system.
These all are from one table only. while i am editing in one view, i must be able to edit the another view also. at a time 2 users cant edit the same view but at a time two users have to edit two different viws from same table.
I have to provide all authorization to all views at the same time.How to achieve this?.
Thanks.
Edited by: pagidala Ramesh on Oct 27, 2008 10:52 AM

Hi Pagidala,
This is my idea how much it can help you i am not sure but, create txcode for views and assign the authorizations for the txcodes according to your requirements. May be your issue will resolve.
Cheers!!
VEnk@

Want Authorization for SM30 in particular table

Hi friends,
i am created a ztable and also created table maintanence generator.
now my problem is, i want to Authorization for SM30 in particular table.
Thanks & Rgards,
Vallamuthu.M

Hi this will help u.
In general different users will be given different authorizations based on their role in the orgn.
We create ROLES and assign the Authorization and TCODES for that role, so only that user can have access to those T Codes.
USe SUIM and SU21 T codes for this.
Much of the data in an R/3 system has to be protected so that unauthorized users cannot access it. Therefore the appropriate authorization is required before a user can carry out certain actions in the system. When you log on to the R/3 system, the system checks in the user master record to see which transactions you are authorized to use. An authorization check is implemented for every sensitive transaction.
If you wish to protect a transaction that you have programmed yourself, then you must implement an authorization check.
This means you have to allocate an authorization object in the definition of the transaction.
For example:
program an AUTHORITY-CHECK.
AUTHORITY-CHECK OBJECT <authorization object>
ID <authority field 1> FIELD <field value 1>.
ID <authority field 2> FIELD <field value 2>.
ID <authority-field n> FIELD <field value n>.
The OBJECT parameter specifies the authorization object.
The ID parameter specifies an authorization field (in the authorization object).
The FIELD parameter specifies a value for the authorization field.
The authorization object and its fields have to be suitable for the transaction. In most cases you will be able to use the existing authorization objects to protect your data. But new developments may require that you define new authorization objects and fields.
http://help.sap.com/saphelp_nw04s/helpdata/en/52/67167f439b11d1896f0000e8322d00/content.htm
To ensure that a user has the appropriate authorizations when he or she performs an action, users are subject to authorization checks.
Authorization : An authorization enables you to perform a particular activity in the SAP System, based on a set of authorization object field values.
You program the authorization check using the ABAP statement AUTHORITY-CHECK.
AUTHORITY-CHECK OBJECT 'S_TRVL_BKS'
ID 'ACTVT' FIELD '02'
ID 'CUSTTYPE' FIELD 'B'.
IF SY-SUBRC <> 0.
MESSAGE E...
ENDIF.
'S_TRVL_BKS' is a auth. object
ID 'ACTVT' FIELD '02' in place 2 you can put 1,2, 3 for change create or display.
The AUTHORITY-CHECK checks whether a user has the appropriate authorization to execute a particular activity.
This Authorization concept is somewhat linked with BASIS people.
As a developer you may not have access to access to SU21 Transaction where you have to define, authorizations, Objects and for nthat object you assign fields and values. Another Tcode is PFCG where you can assign these authrization objects and TCodes for a profile and that profile in turn attached to a particular user.
Take the help of the basis Guy and create and use.
Sy-SUBRC values
4 User has no authorization in the SAP System for
 such an action. If necessary, change the user
 master record.
8 Too many parameters (fields, values). Maximum
 allowed is 10.
12 Specified object not maintained in the user
 master record.
16 No profile entered in the user master record.
24 The field names of the check call do not match
 those of an authorization. Either the
 authorization or the call is incorrect.
28 Incorrect structure for user master record.
32 Incorrect structure for user master record.
36 Incorrect structure for user master record.
with regards,
Hema Sundara.
pls reward if u find it helpful.

Table Maintance for fields having length 3000

Hi,
How to create Table Maintance generator for Table fields having length 3000, expecting quick reply
Thanks in advance,
Srinivas M

Hi
In that Tcode
Slection date: It is only on e field.(BUDAT).
This field declared using select options satement internally.
U should give range of dates.
If it is helpful rewards points.
Regards
Pratap.M

Authorization for project (table PROJ)

Hi experts !
I would like create role for PS modula which is limited to field Object Class equal Investment. Itu2019s impossible. How I can check which field I can use for authorization for project (table PROJ).
Rgds Stenwa

Stenwa,
there are no user fields in the project definition. Instead you will find them in the WBS element. In that case, you can use standard authorization objet C_PRPS_USR to check on the user fields, but, as I say, it will not point to PROJ but to PRPS.
CNEX0002 is a user exit to enhance authorizations in PS. You can check it in SMOD and create an implementation in CMOD but you will need the help of an abaper to create the necesary coding.
Rgds
Martina

How to use table maintance generator

Hi Friends,
I wanted to add more data in predefined table. For that table maintance is allowed with restriction. So anybody will tell me how to proceed for adding more data in table.
Regards,
Salil

Hi Ajay,
Thanks for ur valuable reply. But i m unable to make entry by both ways. Suppose i m going through se11. How i can judge authorization group & function group.
I m using crm table. I dont know the authorization group for that table as well as function group. May i choose any thing by F4 & then create entries???
Regards,
Salil

Uploading data through Table Maintance Generator

hi Folks,
I have created three Custom tables in Solution Manager. i need to create multiple entries for the tables. but i am very new to table maintanance generator. could any one tel me the step by step procedure (Like what to give for authorization grp and Function grp) to accomplish the task. thnx in advance.
santosh....

Hi,
Table maintanance Generator is used to manually
input values using transaction sm30.The Table Maintenance Generator is used to create table maintenance program to add, modify or delete records in the database table. This can be accessed using transaction SE54 or in SE11 using the menu Utilities->Table Maintenance Generator
follow below steps
go to se11 check table maintanance check box under
attributes tab
utilities-table maintanance Generator->
create function group and assign it under
function group input box.
also assign authorization group default &NC& .
select standard recording routine radio in table
table mainitainence generator to move table
contents to quality and production by assigning
it to request.
select maintaience type as single step.
maintainence screen as system generated numbers
this dialog box appears when you click on create
button
save and activate table
http://help.sap.com/saphelp_nw04/helpdata/en/cf/21ed2d446011d189700000e8322d00/content.htm
One step, two step in Table Maintenance Generator
Single step: Only overview screen is created i.e. the Table Maintenance Program will have only one screen where you can add, delete or edit records.
Two step: Two screens namely the overview screen and Single screen are created. The user can see the key fields in the first screen and can further go on to edit further details.
please check the link for getting information about table maintenance generator !
https://www.sdn.sap.com/irj/sdn/advancedsearch?query=use%20of%20table%20maintenance%20generator&cat=sdn_all
http://www.sapdevelopment.co.uk/tips/tips_tabmaint_tcode.htm
http://www.sap-img.com/abap/create-a-table-maintance-program-for-a-z-table.htm
Regards,
Priyanka.

Authorization for Table Maintance

Similar Messages

Maybe you are looking for