Authorization in HR ABAP?

Dear all,
Kindly let me know how many ways Authorization can be provide?

Hi,
in HR ABAP Authorization can be Done in two level.
by person & by Date range.
hope it will helps u ...!!!

Similar Messages

Authorization to execute ABAP program

Hi,
I would like to execute one ABAP program, so what authorizations i need to have please le tme know? It is developed by our developers i want to test the program in produvction server.
Thanks
praveen

Praveen,
which authorizations you need depend of course on many things.
But if you not will be using the transaction method mentioned earlier in the post you have to extend your own ABAP with own authorization checks.
You can reuse SAP-authorizations or create your own authorizations as well. It all depends on what you are trying to achieve. Some times it is wise to reuse, and some times it is wise to create own authorizations.
http://help.sap.com/erp2005_ehp_03/helpdata/EN/52/67167f439b11d1896f0000e8322d00/frameset.htm
Good luck!
//freppe

Authorizations for Developer/ABAPer

Are there any SAP delivered authorizations for ABAP developer on ECC 6.0 system.
    For now, I have given
      SAP_BC_DWB_ABAPDEVELOPER
       SAP_BC_TC_DEVELOP_ALL
    But, my our developer is not happy at all, complaining, she could do nothing.
This is a development system and I need suitable authorizations for unit test and development client.
    Also please advice what should be security settings on SCC4 for development client and unit testing ?
Many Thanks,
N

Search this topic forum for "John Cleese"
Kind regards,
Julius

MSS Authorizations to the ABAP User: Note 844639

Hi Experts,
I am implementing MSS 1.0 on mySAP ERP05 and I need information on MSS Athorizations to be assigned to the backend MSS users.
I have got a note 844639 but I have the following questions:
1. Do I have to implement note 785345 as a prerequisite? I have upgraded from 4.6c to ECC6. Do I still require to implement this note?
2. There are so many WD applications based services for MSS. Do I have to get a list of each Authorization Object assigned to all the services and then consolidate it under one single ZMSS role in PFCG?
3. What about the default values of the sub objects of all Authorization Objects?
4. Similar to the ESS composite role SAP_EMPLOYEE_ERP with all the necessary authorizations, dont we have a standard MSS composite role which we can activate directly?
I would really apreciate some help on this.
Regards,
Shobhit

Hi Walter,
I am putting across my questions again regarding Note 844639:
1. There are so many WD applications based services for MSS. Do I have to get a list of each Authorization Object assigned to all the services and then consolidate it under one single ZMSS role in PFCG?
2. What about the default values of the sub objects of all Authorization Objects?
3. Similar to the ESS composite role SAP_EMPLOYEE_ERP with all the necessary authorizations, dont we have a standard MSS composite role which we can activate directly?
Appreciate any help on the matter.
Thanks,
Shobhit

Authorization checking in ABAP program

I have a customed report which shows sales order information, with sales order no., sales. org, distribution channel, division and some others as selection criteria.
How I can limit a user that can view only 1 or 2 specific sales. org. (according to his/her authorization profile) even though he/she hasn't input anything in the sales org. field during selection?
Thanks!

Hi Gundam
If the user doesnt input any sales organization then
you can get the list of sales organizations defined from
table TVKO and then check for the authorization using each entry. Prepare a range for all sales organizations
whereby later you can use in extraction process.
Other better way is to make the parameter/select-option
mandatory so the user has to enter the sales organization.
Hope the above info helps you.
Kind Regards
Eswar

How authorization, authonotication in abap

how to set roles to access...packages or objects...how to set the prvileges in ABAP

Hi Balaji..
Try to see transactions,
SU02 Maintain Authorization Profiles
SU03 Maintain Authorizations
SU20 Maintain Authorization Fields
SU21 Maintain Authorization Objects
SUIM Call AUTH reporting tree (info sys.)
Thanks and Best Regards,
Vikas Bittera.
***Points for useful answers ***

How to set portal authorization in ABAP Webdynpro application

Hi All,
Do you have an idea how to set the visibility for Group UI element based on the Portal user authorization in ABAP Webdynpro , for example if the portal user A(or group A), logins into the portal on click of the ABAP Webdynpro IView then we need to set invisible (hide) the Group UI element in webdynpro ABAP Application.
Do you have any sample code on the same to handle the portal authorization in Webdynpro ABAP?? , please let me know if couldnu2019t understand this requirement or my explanation
Thanks,
PortalUser100

Hi Kris,
Thanks for your reply.
Like however we passed the UserID, can we pass Group ID also to the ABAP Webdynpro application??
Can u get me other things, how to copy of the existing component and i want to give the new name for the component and there i need to modify, i dont want to disturb original component before copy...let me know the procedure for the same??
Regards,
PortalUser100

How do the "Authorization" in ABAP mathch to "Action" in Java?

Recently I am studying the CC of GRC and some concept really confused me. When creating a new function we need to add some related "Actions" to it, but the concept "Action" only exists in SAP Web AS Java scope, not the ABAP scope. How do the authorization concepts in ABAP like "Authorization Object", "Authorizaton" match to things in Java scope? Obviously we need those ABAP authroization unit when defining the risk among the business processes.
Thanks

Hi Dustin,
in CC functions, the term "action" was chosen because we do need to include actions for non-SAP systems, too.
In an SAP ABAP context, this can be translated to "TCODE". When you look at the UME connector in 5.3, "Action" also rings a bell in an SAP context.
Kind regards,
Frank.

Regarding the Authorization in ABAP-HR

Hi all,
I want to know about the Authorizations in the ABAP-HR. If any body is having any material regarding the can you plz share with me...
thanks in advance,
Suresh

Hi Kutam,
Chk these Links....
Can i have the list of infotypes .
abap hr
http://www.asug.com/client_files/Calendar/Upload/HR_STRUCTURAL_AUTHORIZATIONS.ppt
Reward Points if Useful
All the Best
Gokul

PI Java VS ABAP Authorizations

Hi,
I'm trying to create an authorization profile for individual support teams for integration.
Using the authorization object S_XMB_MONI, we are able to restrict the users to display/restart/cancel messages belonging to a specific party/service/interface name-namespace in the ABAP stack.
I'm trying to establish the same functionality on the Java stack, specifically in the RWB. If the role SAP_XI_MONITOR_J2EE role is assigned to a user in UME, then he/she gains the authorization to execute actions for all messages, whereas I need to restrict this authorization likely with ABAP using a specific party/service/interface name-namespace again for the Adapte Engine.
As the UME roles are made up of services and relevant actions, I tried to create a custom role, but these actions do not provide any restrictions.
In the end, I want a support group to be able to support only their relevant project by gaining authorizations to execute actions(reprocess, cancel, display etc) for only their messages both in the Integration Engine and the Adapter Engine.
Kindly advise (if) how this can be done in the Java stack.
Regards,
S. Gökhan TOPÇ

It looks like the only way to establish this is using ACLs in J2EE, which is not supported via a GUI as well. And it would take some serious design and development to apply it.
http://help.sap.com/saphelp_nwpi711/helpdata/en/48/c943f3825c581ce10000000a42189c/content.htm

Authorization in ABAP Query

Dear Guys
Is it true that ABAP Query bypass Authorizations Profiles while ABAP reports dont,

Hi,
Generally QUERY's are User Specific (Pertaining to USER GROUP).
Where as Reports are Global to all, Unless you restrict them with some Explicit Authorizations.
Regards,
Anji

SAP authorizations in ABAP

hi folks,
I have another question that goes like this, how to create authorizations in ABAP programming ?
explanation with examples would be really helpful.
thanks
Vinu

Hi,
Checking User Authorizations in your ABAP Program
How to set Authorization to an ABAP Programs?
Much of the data in an R/3 system has to be protected so that unauthorized users cannot access it. Therefore the appropriate authorization is required before a user can carry out certain actions in the system. When you log on to the R/3 system, the system checks in the user master record to see which transactions you are authorized to use. An authorization check is implemented for every sensitive transaction.
If you wish to protect a transaction that you have programmed yourself, then you must implement an authorization check.
This means you have to allocate an authorization object in the definition of the transaction.
For example:
program an AUTHORITY-CHECK.
AUTHORITY-CHECK OBJECT <authorization object>
 ID <authority field 1> FIELD <field value 1>.
 ID <authority field 2> FIELD <field value 2>.
 ID <authority-field n> FIELD <field value n>.
The OBJECT parameter specifies the authorization object.
The ID parameter specifies an authorization field (in the authorization object).
The FIELD parameter specifies a value for the authorization field.
The authorization object and its fields have to be suitable for the transaction. In most cases you will be able to use the existing authorization objects to protect your data. But new developments may require that you define new authorization objects and fields.
Use T/Code SE80 to Create Authorization object.

NO Authorization error when accessing Functional module RH_CUT_OBJECT

Hi,
I am getting NO AUTHORIZATIOn error when I am executing SE37-->FUNCTIONAL OBJECT-RH_CUT_OBJECT.
I also checked SU53 screenshot which says AUTHORIZATION CHECK SUCCESSFUL and there are no errors or missing authorizations highlighted in SU53.
I switched on the TRACE-ST01 then also the error is not captured.
I would like to know WHY am I getting NO AUTHORIZATION error.
I am already having access to T-CODE SE37, SE11, SE80, SMARTFORMS and authorization object S_DEVELOP.
I need to know this ASAP on why I am getting NO AUTHORIZATION error when I am trying to access the FUNCTIONAL MODULE RH_CUT_OBJECT whereas I am having all the required authorization required for ABAP Developer including SE37.
Is it something I need change at ABAP code level.
Please advise ASAP.

The reason is ..You do not have acess to see/acess the data this FM is trying to acess ...Debug the function module keep a breakpoint at The Raise statement see which authorization you do not have ....BTW this is my guess you are trying to demilit certain objects /infotypes using this FM and delimit basically makes that object non-usable in that system .So it is quite evident that every one will not have authorization for that .Please post in detail that what is it that you are trying to achieve using this function module .....
Also you can check with debugging which authority object is being checked before raising the message and can ask security team to get that added to your profile ....
Thanks,
Anjaneya

Help in abap program

hellow i have a table itab with value (ex. error value) and i wont to select some value from tables ( defined below.) and put it in table err_itab my problem is in the loop i dont now how to continued from their i thihk with append to intrernal tables and after to do read to err_itab, but im not sure this is my program any suggestion. thankes for your time and suggestion.
form write_2_file .
IF file_ser IS INITIAL.
CALL FUNCTION 'WS_UPLOAD'
EXPORTING
CODEPAGE = ' '
filename = l_name
FILETYPE = 'ASC'
HEADLEN = ' '
LINE_EXIT = ' '
TRUNCLEN = ' '
USER_FORM = ' '
USER_PROG = ' '
DAT_D_FORMAT = ' '
IMPORTING
FILELENGTH =
TABLES
data_tab = itab
EXCEPTIONS
conversion_error = 1
file_open_error = 2
file_read_error = 3
invalid_type = 4
no_batch = 5
unknown_error = 6
invalid_table_width = 7
gui_refuse_filetransfer = 8
customer_error = 9
no_authority = 10
OTHERS = 11
IF sy-subrc <> 0.
MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
ENDIF.
ELSE.
OPEN DATASET file_ser IN TEXT MODE
ENCODING DEFAULT FOR INPUT.
IF sy-subrc NE 0.
MESSAGE e002(yhr) .
ENDIF.
DO.
READ DATASET file_ser INTO wa_itab.
IF sy-subrc NE 0.
EXIT.
ENDIF.
APPEND wa_itab TO itab.
ENDDO.
ENDIF.
endform. " write_2_file
FORM get_data .
CLEAR wa_itab.
LOOP AT itab INTO wa_itab.
IF wa_itab-action = 'y1'
OR wa_itab-action = 'y2'
OR wa_itab-action = 'y3'.
SELECT SINGLE ansvh
FROM t542a
INTO wa_b_itab-ansvh
WHERE molga ='IL'
AND ansvh = wa_itab-contract.
IF sy-subrc <> 0.
APPEND wa_b_itab TO b_itab.
SELECT SINGLE werks btrtl
FROM t001p
INTO (wa_c_itab-werks, wa_c_itab-btrtl)
WHERE molga ='IL'
AND werks = wa_itab-personnel_area
AND btrtl = wa_itab-personnel_subarea.
IF sy-subrc <> 0.
APPEND wa_c_itab TO c_itab.
SELECT SINGLE objid
FROM hrp1000
INTO wa_d_itab-objid
WHERE otype = 'S'
AND objid = wa_itab-plans
AND begda <= currnt_date
AND endda >= currnt_date.
APPEND wa_d_itab TO d_itab.
ENDIF.
ENDIF.
ENDIF.
ENDLOOP.

I have added authorization check in ABAP program(Progran level security).
i assume you have coded call authority within the program.
If an end user runs the transactionm, then which authorization check will fire first?
if he calls the transaction, then first authorization attached to the transaction will be checked.
but if he executes the program attached to the transaction, then the authorization attached to the transaction dosent help here, the one coded in side the program is checked.
If I have web enabled my ABAP program via SICF (in other words, ITS).
it depends,
if you are calling your transaction like
webgui/?~transaction=<tcode> then first tcode level authorization.
if you generate the templates for the program and callign the same, then i guess its progam level. (i need to check this)
Regards
Raja

Question on security in ABAP. Please help!

Hi Experts,
I have a question on security in ABAP program.
I have a ABAP program which has a transaction attached.
I have added authorization check in ABAP program(Progran level security).
I have also attached the authorization object to the transaction.(Transaction level security)
If an end user runs the transactionm, then which authorization check will fire first? Will it be transaction level?
If I have web enabled my ABAP program via SICF (in other words, ITS). Then when I try to run my ITS service in the browser will the transaction level authorization fire? or Will the program level authorization fire?
Please help me understand this security aspect.
Thanks
Gopal

Hi gopalkrishna,
1. if an end user runs the transactionm, then which authorization check will fire first? Will it be transaction level?
Yes, transaction level first !
2. In ITS scenario also,
a) first tcode level,
b) then, program level
regards,
amit m.

Authorization in HR ABAP?

Similar Messages

Maybe you are looking for