Authorization in UCMON

Question

Hi guys,
I have the following issue: I limited authorization on company level for tasks in UCMON. Each company can only access their own tasks, nevertheless can each company still see the status of all other companies in the hierarchy. I would like each company only to see itself. Any hints/ideas?
THX
Stefan

Answer 1

We resolved the issue by customer modification:
Short name:
Company Authorization
Comments on the project solution:
The project solution is aimed to define modifications in the consolidation system to limit the number of companies visible to the end users.
Description of the project solution:
1.     Modifications in the consolidation system
It is recommended to make slight modifications in the SAP program code to limit the number of companies visible in the Consolidation Monitor according to user security settings.
The consolidation system will be enhanced with two new authorization objects:
·     Authorization for companies in consolidation monitor
·     Authorization for partner companies available for manual postings
The SAP source code will be modified to introduce check of these new authorization objects. Two SAP objects will be modified (see Appendix 1 for the detailed description of planned modifications):
·     The method of the Consolidation monitor responsible for the validity check of the companies list. The authority check will mark the companies that user have no authorization for as invalid. The invalid companies are automatically not shown in the consolidation monitor.
·     The function module responsible for collecting list of companies for the search help. The entries user has no authorization for will be deleted from the list.
It is necessary to mention that functional logic of the consolidation system remains intact, since the modifications only affect the visualization part of the system.
This approach has several benefits comparing to use of meaningless company codes:
·     The users at Corporate Reporting Department will see the full range of clear and understandable names of companies and partners
·     The users at Plants will see a limited number of companies and partners according to security settings
This approach also has a drawback:
·     In case of installing new patches from SAP it is necessary to monitor the status of the modifications. In case of replacement of the modified objects with the new version the modifications should be restored in the system. This task will be performed by  IT Department.
1.     Authorization objects
The consolidation system will be enhanced with two authorization objects:
·     Authorization for companies
·     Authorization for partners
2.     Proposed modification of the SAP source code
2.1.     Search help
The consolidation system uses the universal search help for all fields in the consolidation monitor. The search help has technical name UG_SHELP and implemented as functional module UG_MD_REQUEST_CHAR_VALUE_EXIT.
It is recommended to create a Z* copy of this functional module and change the search help object to use the new function. The new functional module will be changed in order to limit the list of companies and partners according to the user security settings. For that purpose the authority check will be inserted at line 88 and invalid entries will be deleted from RECORD_TAB internal table.
2.2.     Consolidation monitor
The number of companies in the consolidation monitor also should be restricted. For that purpose it is necessary to modify the CHECK_VALIDITY method of the CL_UC_MONITOR class. At line 634 will be inserted the authority check of companies listed in the internal table lt_chvc. This table has the VDY_VALID field that is used to mark invalid entries. If the empty value is written to this filed the corresponding companies will be deleted from the list and therefore not shown in the consolidation monitor.
Modifications are marked with bald
method check_validity .
xfm030205: derive context from io_sel
xfm251104: validity check for repgroup-combinations
xfm220704: performance
  data:
        lo_context      type ref to if_uc_context,
        ls_fprop        type ucd_s_fprop,
        lr_data         type ref to data,
        lr_data2        type ref to data,
        lr_data3        type ref to data,
        lr_data4        type ref to data,
        ld_string       type string,
        lo_combi        type ref to if_uc_combination,
        ld_role         type ug_role,
        ld_fieldname    type uc_fieldname,
        ls_sid          type ucd_s_sid,
        lt_sid          type ucd_th_s_sid,
        ld_fsid         type uc_sid,
        lt_value        type uc0_ts_value,
        ls_value        type uc0_s_value,
        ld_index        type sy-index value 0,
        ld_index_from   type sy-index,                      "#EC NEEDED
        ld_case         type uc_flg,
        ls_sid_vdy      type ucs_s_stm_sid_vdy,
        ls_sid_vdy2     type ucs_s_stm_sid_vdy,
        lt_sid_vdy      type ucs_ts_stm_sid_vdy,
        ld_read_flg     type uc_flg,
        l_fieldname     type uc_fieldname,
        l_fieldname1    type uc_fieldname,
        l_fieldname2    type uc_fieldname,
        l_fname_sid1    type uc_sid,
        l_fname_sid2    type uc_sid,
        l_first_run,
        l_first_pair.
  field-symbols:
                type ucs_th_stm_combinations,
      <lt_tab2>       type ucs_t_stm_combinations,          "xfm220704
                  type uc_sid.
  clear e_vdy_active.
is the context initial ?
  if not co_context is initial.
    lo_context = co_context.
  else.
if yes then create it
    call method get_context
      exporting
        io_sel     = io_sel   "xfm030205
        it_ffix    = it_ffix
      importing
        eo_context = lo_context.
  endif.
CASE 1 : there is a combination object(group/unit)
  if not ct_comb_cu is initial or
     not ct_comb_cg is initial.
  check combinations
  distinguish between the group/unit combination
    if not ct_comb_cu is initial.
      ld_role = uc00_cs_role-repunit.
      assign ct_comb_cu to .
      ld_case = '2'.
    endif.
  get the combination object
    call method do_model->get_combination
      exporting
        i_role         = ld_role
        io_sel         = io_sel
      receiving
        eo_combination = lo_combi.
  store the fieldname of the combination
    ld_fieldname = lo_combi->d_fieldname.
  xfm251104 begin
    data: ld_has_vdy type uc_flg,
          lr_s_fprop type ref to ucd_s_fprop,
          lo_combi2  type ref to if_uc_combination.
    if ld_role eq uc00_cs_role-repgroup and ld_fieldname is initial.
       clear ld_has_vdy.
       loop at do_model->ds_role-repgroup  into lr_s_fprop.
           read table do_model->dt_fprop into ls_fprop
                with key fieldname = lr_s_fprop->repug_fld.
           if not ls_fprop-has_vdy is initial.
              ld_has_vdy = 'X'.
              exit.
           endif.
       endloop.
       if ld_has_vdy is initial.
        get the CU- combination object
          call method do_model->get_combination
           exporting
             i_role         = uc00_cs_role-repunit
             io_sel         = io_sel
           receiving
             eo_combination = lo_combi2.
           read table do_model->dt_fprop into ls_fprop
                with key fieldname = lo_combi2->d_fieldname.
           ld_has_vdy = ls_fprop-has_vdy.
        endif.
    else.
    xfm251104 end
    check if the combination object has a validity or not
      read table do_model->dt_fprop into ls_fprop
       with table key fieldname = ld_fieldname.
      ld_has_vdy = ls_fprop-has_vdy.          "xfm251104
    endif.                                    "xfm251104
  if not, then no processing is necessary
  check not ls_fprop-has_vdy is initial.    "xfm251104
    check not ld_has_vdy is initial.          "xfm251104
    e_vdy_active = 'X'.
  create the data structure for the validity check
  the content of this structure ( context + chkeys + validity flag)
    call method lo_combi->create_data_reference
      exporting
        i_type  = do_model->gc_type_ts_chvc
      importing
        er_data = lr_data.
  create and assuign the needed tables and structures
    assign lr_data->* to .
  standard table
  ld_string = 'ucs_t_stm_combinations'.    "xfm220704
    ld_string = 'ucs_ts_stm_combinations'.   "xfm220704
    assign ld_string to .
  loop over the entries
    loop at .
      if l_first_run = space.
      determine the 1. edge
        read table do_model->dt_fprop into ls_fprop with key
        sid = -fsid1.
      if the SID doesn't exist (e.g. after parameter change)
      then leave the processing
        if sy-subrc ne 0.
          continue.
        endif.
        l_fname_sid1 = -fsid1.
        l_fieldname1 = ls_fprop-fieldname.
      1 EDGE
      create and assign data structure  (SID->CH) for the sid->chkey
      conversion
        call method do_model->create_data_reference
          exporting
            i_fieldname = l_fieldname1
            i_type      = do_model->gc_type_th_map_sid2ch
          importing
            er_data     = lr_data.
        assign lr_data->* to .
      create and assign data structure  (CH->SID) for the chkey->sid
      conversion
        call method do_model->create_data_reference
          exporting
            i_fieldname = l_fieldname1
            i_type      = do_model->gc_type_th_map_ch2sid
          importing
            er_data     = lr_data.
        assign lr_data->* to .
      For Edge 2. (The same process as for the 1. edge)
      create and assign data structure  (SID->CH)
        read table do_model->dt_fprop into ls_fprop with key
        sid = -fsid2.
      if the SID doesn't exist (e.g. after parameter change) then
      leave the processing
        if sy-subrc ne 0.
           continue.
        endif.
        l_fname_sid2 = .
      create and assign data structure  (CH->SID)
        call method do_model->create_data_reference
          exporting
            i_fieldname = l_fieldname2
            i_type      = do_model->gc_type_th_map_ch2sid
          importing
            er_data     = lr_data.
        assign lr_data->* to .
        l_first_run = 'X'.
      endif.
fill the original values into the convert table
the flag "first_pair" is necessary because we have double entries in
this table ( SID1 - SID2 und SID2 - SID1) but for the validity check
is one of them enough. After the val.check we have to take care
about the deleting of both entries !!
      if l_first_pair = space.
        l_first_pair = 'X'.
      else.
        clear l_first_pair.
      endif.
    endloop.
  convert sid to chkey
    call method do_model->do_sidmap->convert_tab_sid_to_chkey
      exporting
        i_fieldname = l_fieldname1
      changing
        ct_sid2ch   = .
  fill the ch-sid table
  convert sid to chkey
    call method do_model->do_sidmap->convert_tab_sid_to_chkey
      exporting
        i_fieldname = l_fieldname2
      changing
        ct_sid2ch   = .
  fill the ch-sid table
  fill the table for the validity check
    assign component do_model->gc_type_comp_o_context
     of structure .
    1. EDGE
    2. EDGE
      endif.
    insert
    endloop.
  check validity
    call method lo_combi->check_validity
      exporting
        it_ffix = lo_context->dt_context
      changing
        ct_chvc =  = 0.
the table <lt_chvc> is sorted by sid. It means that we must convert
the actual char.values to sid, to be able to read the according entry
in the table <lt_tab2>
      read the 1. edge
        move-corresponding .
      read the 2. edge
        move-corresponding .
      delete the original table with the determined keys
      delete the first entry of the pair
        delete .
      delete the second entry of the pair
        delete -vsid2.
      endif.
    endloop.
  change : if the export table is initial, then create an dummy entry
    if .
    endif.
  elseif not ct_sid_vdy is initial.
  mass request
    lt_sid_vdy = ct_sid_vdy.
    ld_index = 0.
  initial : all entrys are valid
    loop at lt_sid_vdy into ls_sid_vdy where vdy_valid = space.
      ls_sid_vdy-vdy_valid = '1'.
      modify table lt_sid_vdy from ls_sid_vdy.
    endloop.
    loop at ct_sid_vdy into ls_sid_vdy.
      ld_index = ld_index + 1.
      if ld_index = 1.
        ld_fsid = ls_sid_vdy-fieldname_sid.
      endif.
      if ls_sid_vdy-fieldname_sid = ld_fsid.
        if ld_read_flg is initial.
          read table do_model->dt_fprop into ls_fprop
                  with key sid = ld_fsid.
          if sy-subrc ne 0.
            continue.
          endif.
          ld_fieldname  = ls_fprop-fieldname.
        adjust from-index for later loop
          if ld_index = 1.
            ld_index_from = ld_index.
          endif.
          ld_read_flg   = 'X'.
        endif.
        if not ls_fprop-has_vdy is initial.
        insert "new kind" of sids
          ls_sid-fieldname_sid = ls_sid_vdy-fieldname_sid.
          ls_sid-value_sid     = ls_sid_vdy-value_sid.
          insert ls_sid into table lt_sid.
        else.
          ls_sid_vdy-vdy_valid  = 1.
          modify table lt_sid_vdy from ls_sid_vdy.
        endif.
      elseif not lt_sid is initial.
      check validity of (all) previous entries
        call method do_model->create_data_reference
          exporting
            i_fieldname = ld_fieldname
            i_type      = do_model->gc_type_ts_chvc
          importing
            er_data     = lr_data.
        assign lr_data->* to .
      context
        assign component do_model->gc_type_comp_o_context
               of structure .
      chkey
        assign component do_model->gc_type_comp_s_chkey
        of structure .
      create data for the charkeys
        call method do_model->create_data_reference
          exporting
            i_fieldname = ld_fieldname
            i_type      = do_model->gc_type_s_chkey
          importing
            er_data     = lr_data.
        assign lr_data->* to .
      fill values into check_validity table
        loop at lt_sid into ls_sid.
          call method do_model->do_sidmap->convert_sid_to_chkey
            exporting
              is_sid   = ls_sid
            importing
              es_chkey = .
        endloop.
      check validity of char values
        call method do_model->check_char_validity
          exporting
            i_fieldname = ld_fieldname
            it_ffix     = lo_context->dt_context
          changing
            ct_chvc     = dt_fprop into ls_fprop
                   with key sid = ld_fsid.
        l_fieldname = ls_fprop-fieldname.
      modify the invalid entries
        loop at
              importing
                es_sid      = ls_sid.
          read the according entry from the  "lt_sid_vdy"
            read table lt_sid_vdy into ls_sid_vdy2 with key
            fieldname_sid = ls_sid-fieldname_sid
            value_sid = ls_sid-value_sid.
            if sy-subrc = 0.
             ls_sid_vdy2-vdy_valid = '0'.
             MODIFY TABLE lt_sid_vdy FROM ls_sid_vdy2.
             DELETE TABLE lt_sid_vdy FROM ls_sid_vdy2.
              delete lt_sid_vdy where
              fieldname_sid = ls_sid_vdy2-fieldname_sid and
              value_sid = ls_sid_vdy2-value_sid.
            endif.
          endif.
        endloop.
      initialization for new kind of fields
        clear ld_read_flg.
        refresh lt_sid.
        ld_fsid = ls_sid_vdy-fieldname_sid.
        if ld_read_flg is initial.
          read table do_model->dt_fprop into ls_fprop
              with key sid = ld_fsid.
          ld_fieldname  = ls_fprop-fieldname.
          ld_index_from = ld_index.
          ld_read_flg   = 'X'.
        endif.
        if not ls_fprop-has_vdy is initial.
        insert "new kind" of sids
          ls_sid-fieldname_sid = ls_sid_vdy-fieldname_sid.
          ls_sid-value_sid     = ls_sid_vdy-value_sid.
          insert ls_sid into table lt_sid.
        else.
          ls_sid_vdy-vdy_valid  = 1.
          modify table lt_sid_vdy from ls_sid_vdy.
        endif.
      else.
      initialization for new kind of fields
        clear ld_read_flg.
        refresh lt_sid.
        ld_fsid = ls_sid_vdy-fieldname_sid.
        if ld_read_flg is initial.
          read table do_model->dt_fprop into ls_fprop
              with key sid = ld_fsid.
          ld_fieldname  = ls_fprop-fieldname.
          ld_index_from = ld_index.
          ld_read_flg   = 'X'.
        endif.
        if not ls_fprop-has_vdy is initial.
        insert "new kind" of sids
          ls_sid-fieldname_sid = ls_sid_vdy-fieldname_sid.
          ls_sid-value_sid     = ls_sid_vdy-value_sid.
          insert ls_sid into table lt_sid.
        else.
          ls_sid_vdy-vdy_valid  = 1.
          modify table lt_sid_vdy from ls_sid_vdy.
        endif.
      endif.
    endloop.
  check validity of (all) previous entries ( after the last group)
    if not lt_sid is initial.
      call method do_model->create_data_reference
        exporting
          i_fieldname = ld_fieldname
          i_type      = do_model->gc_type_ts_chvc
        importing
          er_data     = lr_data.
      assign lr_data->* to .
    context
      assign component do_model->gc_type_comp_o_context
       of structure .
    chkey
      assign component do_model->gc_type_comp_s_chkey
      of structure .
    create data for the charkeys
      call method do_model->create_data_reference
        exporting
          i_fieldname = ld_fieldname
          i_type      = do_model->gc_type_s_chkey
        importing
          er_data     = lr_data.
      assign lr_data->* to .
    fill values into check_validity table
      loop at lt_sid into ls_sid.
        call method do_model->do_sidmap->convert_sid_to_chkey
          exporting
            is_sid   = ls_sid
          importing
            es_chkey = .
      endloop.
    check validity of char values
      call method do_model->check_char_validity
        exporting
          i_fieldname = ld_fieldname
          it_ffix     = lo_context->dt_context
        changing
          ct_chvc     = dt_fprop into ls_fprop
                 with key sid = ld_fsid.
      l_fieldname = ls_fprop-fieldname.
*{   INSERT         BDSK903109                                        1
Проверяем на полномочия каждую компанию из списка*
LOOP AT <lt_chvc> INTO <ls_chvc>.
IF <f_valid> = '1'.
AUTHORITY-CHECK OBJECT 'ZBCS_COMP'
ID '9ZCOMPANY' FIELD <ls_chvc_chkey>.
  Если полномочия отсутствуют помечаем компанию как не валидную*
IF sy-subrc <> 0.
CLEAR <f_valid>.
MODIFY <lt_chvc> FROM <ls_chvc>.
ENDIF.
ENDIF.
ENDLOOP.
*}   INSERT
    modify the invalid entries
      loop at
            importing
              es_sid      = ls_sid.
        read the according entry from the  "lt_sid_vdy"
          read table lt_sid_vdy into ls_sid_vdy2 with key
                     fieldname_sid = ls_sid-fieldname_sid
          value_sid = ls_sid-value_sid.
          if sy-subrc = 0.
          ls_sid_vdy2-vdy_valid = '0'.
          MODIFY TABLE lt_sid_vdy FROM ls_sid_vdy2.
          DELETE TABLE lt_sid_vdy FROM ls_sid_vdy2.
            delete lt_sid_vdy where
            fieldname_sid = ls_sid_vdy2-fieldname_sid and
            value_sid = ls_sid_vdy2-value_sid.
          endif.
        endif.
      endloop.
    endif.
    ct_sid_vdy = lt_sid_vdy.
CASE 2 : there is no combination object filled
  elseif not is_sid is initial.
  single value
    clear e_invalid.
    read table do_model->dt_fprop into ls_fprop
          with key sid = is_sid-fieldname_sid.
    check sy-subrc = 0.
    check not ls_fprop-has_vdy is initial.
    ld_fieldname = ls_fprop-fieldname.
    e_vdy_active = 'X'.
    ls_sid = is_sid.
    call method do_model->create_data_reference
      exporting
        i_fieldname = ld_fieldname
        i_type      = do_model->gc_type_ts_chvc
      importing
        er_data     = lr_data.
    assign lr_data->* to .
  check validity of char value
    call method do_model->check_char_validity
      exporting
        i_fieldname = ld_fieldname
        it_ffix     = lo_context->dt_context
      changing
        ct_chvc     =  = 0.
        e_invalid = 'X'.
        exit.
      endif.
    endloop.
  endif.
endmethod.
corrections
jhn021002 021002 note 559186 wrong sort order of available values
FUNCTION z_ug_request_char_value_exit.
""Локальный интерфейс:
*"  TABLES
*"      SHLP_TAB TYPE  SHLP_DESCT
*"      RECORD_TAB STRUCTURE  SEAHLPRES
*"  CHANGING
*"     VALUE(SHLP) TYPE  SHLP_DESCR
*"     VALUE(CALLCONTROL) LIKE  DDSHF4CTRL STRUCTURE  DDSHF4CTRL
EXIT immediately, if you do not want to handle this step
  CLASS cl_ug_md_fieldname DEFINITION LOAD.
  IF callcontrol-step    <> 'SELONE' AND
     callcontrol-step    <> 'SELECT' AND
     callcontrol-step    <> 'DISP'.
    EXIT.
  ENDIF.
STEP SELONE  (Select one of the elementary searchhelps)
This step is only called for collective searchhelps. It may be used
to reduce the amount of elementary searchhelps given in SHLP_TAB.
The compound searchhelp is given in SHLP.
If you do not change CALLCONTROL-STEP, the next step is the
dialog, to select one of the elementary searchhelps.
If you want to skip this dialog, you have to return the selected
elementary searchhelp in SHLP and to change CALLCONTROL-STEP to
either to 'PRESEL' or to 'SELECT'.
  IF callcontrol-step = 'SELONE'.
  PERFORM SELONE .........
    EXIT.
  ENDIF.
STEP PRESEL  (Enter selection conditions)
This step allows you, to influence the selection conditions either
before they are displayed or in order to skip the dialog completely.
If you want to skip the dialog, you should change CALLCONTROL-STEP
to 'SELECT'.
Normaly only SHLP-SELOPT should be changed in this step.
  IF callcontrol-step = 'PRESEL'.
  PERFORM PRESEL ..........
    EXIT.
  ENDIF.
STEP SELECT    (Select values)
This step may be used to overtake the data selection completely.
To skip the standard seletion, you should return 'DISP' as following
step in CALLCONTROL-STEP.
Normally RECORD_TAB should be filled after this step.
Standard function module F4UT_RESULTS_MAP may be very helpfull in this
step.
  DATA rc TYPE sy-subrc.
  IF callcontrol-step = 'SELECT'.
    PERFORM step_select TABLES record_tab shlp_tab
                        CHANGING shlp callcontrol rc.
    IF rc EQ space.
PERFORM authority_check TABLES record_tab shlp_tab
CHANGING shlp callcontrol.
      callcontrol-step = 'DISP'.
    ELSE.
      callcontrol-step = 'EXIT'.
    ENDIF.
    EXIT.                                  "we do not need the step DISP
  ENDIF.
STEP DISP     (Display values)
This step is called, before the selected data is displayed.
You can e.g. modify or reduce the data in RECORD_TAB
according to the users authority.
If you want to get the standard display dialog afterwards, you
should not change CALLCONTROL-STEP.
If you want to overtake the dialog on you own, you must return
the following values in CALLCONTROL-STEP:
- "RETURN" if one line was selected. The selected line must be
  the only record left in RECORD_TAB. The corresponding fields of
  this line are entered into the screen.
- "EXIT" if the values request should be aborted
- "PRESEL" if you want to return to the selection dialog
Standard function modules F4UT_PARAMETER_VALUE_GET and
F4UT_PARAMETER_RESULTS_PUT may be very helpfull in this step.
  IF callcontrol-step = 'DISP'.
   PERFORM authority_check TABLES record_tab shlp_tab
                           CHANGING shlp callcontrol.
    EXIT.
  ENDIF.
ENDFUNCTION..
*&      Form  authority_check
FORM authority_check TABLES   record_tab   STRUCTURE seahlpres
shlp_tab     TYPE      shlp_descr_tab_t
CHANGING shlp         TYPE      shlp_descr_t
callcontrol  TYPE      ddshf4ctrl.
DATA: lv_company TYPE /bic/oizcompany,
lv_pcomp TYPE /bic/oizpcomp,
lv_len TYPE i.
FIELD-SYMBOLS: <fs_shlp_descr> TYPE ddshiface,
<fs_seahlpres> TYPE seahlpres.
Получаем поле поиска*
READ TABLE shlp-interface INDEX 1 ASSIGNING <fs_shlp_descr>.
IF sy-subrc <> 0.
EXIT.
ENDIF.
CASE <fs_shlp_descr>-shlpfield.
WHEN '/BIC/ZCOMPANY'.
    Компания*
    Получаем длинну признака Компания*
DESCRIBE FIELD lv_company LENGTH lv_len IN CHARACTER MODE.
LOOP AT record_tab ASSIGNING <fs_seahlpres>.
      Получаем код компании*
lv_company = <fs_seahlpres>-string(lv_len).
      Проверяем полномочия*
AUTHORITY-CHECK OBJECT 'ZBCS_COMP'
ID '9ZCOMPANY' FIELD lv_company.
      Если полномочия отсутствуют, удаляем компанию из списка*
IF sy-subrc <> 0.
DELETE record_tab WHERE string = <fs_seahlpres>-string.
ENDIF.
ENDLOOP.
WHEN '/BIC/ZPCOMP'.
    Компания партнер*
    Получаем длинну признака Компания*
DESCRIBE FIELD lv_pcomp LENGTH lv_len IN CHARACTER MODE.
LOOP AT record_tab ASSIGNING <fs_seahlpres>.
      Получаем код компании*
lv_pcomp = <fs_seahlpres>-string(lv_len).
      Проверяем полномочия*
AUTHORITY-CHECK OBJECT 'ZBCS_PART'
ID '9ZPCOMP' FIELD lv_pcomp.
      Если полномочия отсутствуют, удаляем компанию из списка*
IF sy-subrc <> 0.
DELETE record_tab WHERE string = <fs_seahlpres>-string.
ENDIF.
ENDLOOP.
ENDCASE.
ENDFORM.                    "authority_check
*&      Form  step_select
FORM step_select TABLES   record_tab  STRUCTURE seahlpres
                          shlp_tab    TYPE      shlp_descr_tab_t
                 CHANGING shlp        TYPE      shlp_descr_t
                          callcontrol TYPE      ddshf4ctrl
                          rc          LIKE      sy-subrc.   "#EC *
  DATA: ls_interface       TYPE ddshiface,
        ls_selopt          TYPE ddshselopt,
        l_application      TYPE ug_application,
        l_areaid           TYPE ug_areaid,
        l_fieldname        TYPE ug_fieldname,
        ls_sel             TYPE ugmd_s_sel,
        lt_sel             TYPE ugmd_ts_sel,
        lo_fieldname       TYPE REF TO if_ug_md_fieldname,
        l_is_comb_field    TYPE ug_flg.
remove application and areaid from field descriptions
  DELETE shlp-interface
    WHERE shlpfield = if_ug_md_factory=>gc_fieldname_application
       OR shlpfield = if_ug_md_factory=>gc_fieldname_areaid.
  DELETE shlp-fielddescr
    WHERE fieldname = if_ug_md_factory=>gc_fieldname_application
       OR fieldname = if_ug_md_factory=>gc_fieldname_areaid.
  DELETE shlp-fieldprop
    WHERE fieldname = if_ug_md_factory=>gc_fieldname_application
       OR fieldname = if_ug_md_factory=>gc_fieldname_areaid.
  LOOP AT shlp-selopt INTO ls_selopt.
    MOVE-CORRESPONDING ls_selopt TO ls_sel.
    ls_sel-fieldname = ls_selopt-shlpfield.
    INSERT ls_sel INTO TABLE lt_sel.
  ENDLOOP.
handling COMBI F4 help
  READ TABLE shlp-selopt INTO ls_selopt
    WITH KEY low = if_ug_md_factory=>gc_combi_f4_dummy.
  IF sy-subrc            IS INITIAL AND
     ls_selopt-shlpfield CS 'COMBI_'.
    l_fieldname = ls_selopt-shlpfield.
  ELSE.
    READ TABLE shlp-interface INTO ls_interface
                                      WITH KEY f4field = 'X'.
    l_fieldname = ls_interface-shlpfield.
  ENDIF.
  lo_fieldname = cl_ug_md_fieldname=>if_ug_md_fieldname~get_instance(
      i_fieldname = l_fieldname ).
  lo_fieldname->is_combination_field(
      IMPORTING ef_is_combination_field = l_is_comb_field ).
  CLEAR ls_sel.
  READ TABLE lt_sel INTO ls_sel
      WITH KEY fieldname = if_ug_md_factory=>gc_fieldname_areaid.
  DELETE lt_sel INDEX sy-tabix.
  l_areaid = ls_sel-low.
  CLEAR ls_sel.
  READ TABLE lt_sel INTO ls_sel
    WITH KEY fieldname = if_ug_md_factory=>gc_fieldname_application.
  DELETE lt_sel INDEX sy-tabix.
  l_application = ls_sel-low.
  IF l_is_comb_field EQ space.
  normal field
    PERFORM step_select_single TABLES    record_tab
                                         shlp_tab
                               USING     lt_sel
                                         l_areaid
                                         l_application
                               CHANGING  shlp
                                         callcontrol.
  ELSE.
combination field
    PERFORM step_select_combi TABLES   record_tab
                                       shlp_tab
                              CHANGING shlp
                                       callcontrol.
  ENDIF.
ENDFORM.                    "step_select
      FORM STEP_SELECT_COMBI
FORM step_select_combi TABLES   record_tab  STRUCTURE seahlpres
                                shlp_tab    TYPE      shlp_descr_tab_t
                       CHANGING shlp        TYPE      shlp_descr_t
                                callcontrol TYPE      ddshf4ctrl.
  CONSTANTS: lc_combi(7) TYPE c VALUE 'COMBI_0'.
  TYPES: BEGIN OF ls_char_combi,
           char  TYPE ug_fieldname,
           combi TYPE ug_fieldname,
         END OF ls_char_combi,
         lt_char_combi TYPE STANDARD TABLE OF ls_char_combi,
         BEGIN OF type_s_char_instance,
           fieldname  TYPE ug_fieldname,
           char       TYPE REF TO if_ug_md_char,
         END OF type_s_char_instance,
         type_t_char_instance TYPE SORTED TABLE
             OF type_s_char_instance WITH UNIQUE KEY fieldname.
  DATA: l_number_of_values LIKE callcontrol-maxrecords,
        lt_field           TYPE ugmd_ts_fieldname,
        lt_field_1         TYPE ugmd_t_fieldname,
        lt_field_2         TYPE ugmd_t_fieldname,
        l_fieldname        TYPE ug_fieldname,
        lt_sel             TYPE ugmd_ts_sel,
        ls_sel             TYPE ugmd_s_sel,
        l_combi_field      TYPE ug_fieldname,
        l_application      TYPE ug_application,
        l_areaid           TYPE ug_areaid,
        lo_md_char         TYPE REF TO if_ug_md_char,
        lo_fieldname       TYPE REF TO if_ug_md_fieldname,
        lo_md_factory      TYPE REF TO if_ug_md_factory,
        ls_selopt          TYPE ddshselopt,
        lt_combi           TYPE ugmd_t_fieldname,
        l_compound_1       TYPE i,
        l_compound_2       TYPE i,
        lt_char            TYPE type_t_char_instance,
        ls_char            TYPE type_s_char_instance,
        lt_sel_1           TYPE ugmd_ts_sel,
        ls_sel_1           TYPE ugmd_s_sel,
        lt_sel_2           TYPE ugmd_ts_sel,
        ls_sel_2           TYPE ugmd_s_sel,
        ls_fdep            TYPE ugmd_s_fdep,
        ls_fdep_1          TYPE ugmd_s_fdep,
        ls_fdep_2          TYPE ugmd_s_fdep,
        l_txt_1            TYPE ug_fieldname,
        l_txt_2            TYPE ug_fieldname,
        lo_char_1          TYPE REF TO if_ug_md_char,
        lo_char_2          TYPE REF TO if_ug_md_char,
        lr_read            TYPE REF TO data,
        lr_t_combi         TYPE REF TO data,
        lr_s_combi         TYPE REF TO data,
       ls_key             TYPE ugmd_s_field_val,
       lt_key             TYPE ugmd_ts_field_val,
        l_replace_vdy      TYPE ug_flg.
  FIELD-SYMBOLS: gc_struct_resolved_combi_f4
      if_table    = 'X'
    IMPORTING
      eo_ref      = lr_t_combi.
Then create the internal table with structure like the ddic table
  ASSIGN lr_t_combi->* TO dt_fdep INTO ls_fdep.
    INSERT ls_fdep-masterfield INTO TABLE lt_field.
    INSERT ls_fdep-masterfield INTO TABLE lt_field_2.
  ENDLOOP.
read all valid combinations
  CALL METHOD lo_md_char->read_value
    EXPORTING
      it_sel   = lt_sel
      it_field = lt_field
    IMPORTING
      et_value = .
apply validity depending to user selection
  PERFORM check_validity USING    lt_sel
                         CHANGING shlp
                                   FROM l_number_of_values.
    ENDIF.
  ENDIF.
changes some column content
  PERFORM change_result_vdy USING    l_replace_vdy
                            CHANGING .
read texts for compounded values
  REFRESH: lt_sel_1,
           lt_sel_2.
  REFRESH lt_char.
  LOOP AT lt_field INTO l_fieldname.
    ls_char-fieldname = l_fieldname.
    ls_char-char      = lo_md_factory->get_char_instance( l_fieldname ).
    INSERT ls_char INTO TABLE lt_char.
  ENDLOOP.
  DESCRIBE TABLE lo_char_1->dt_fdep LINES l_compound_1.
  DESCRIBE TABLE lo_char_2->dt_fdep LINES l_compound_2.
  READ TABLE lo_char_1->dt_fdep INTO ls_fdep_1 INDEX l_compound_1.
  READ TABLE lo_char_2->dt_fdep INTO ls_fdep_2 INDEX l_compound_2.
prepare selection conditions
  CLEAR: ls_sel_1,
         ls_sel_2.
  ls_sel_1-fieldname = ls_fdep_1-masterfield.
  ls_sel_1-sign      = 'I'.
  ls_sel_1-option    = 'EQ'.
  ls_sel_2-fieldname = ls_fdep_2-masterfield.
  ls_sel_2-sign      = 'I'.
  ls_sel_2-option    = 'EQ'.
  LOOP AT .
      INSERT ls_sel_2 INTO TABLE lt_sel_2.
    ENDIF.
  ENDLOOP.
read values and texts for compounded characteristics
  CALL METHOD lo_char_1->create_data_reference
    EXPORTING
      i_structure = if_ug_md_factory=>gc_struct_texts
      it_tablekey = lt_field_1
      i_tabtype   = 'S'
      if_table    = 'X'
    IMPORTING
      eo_ref      = lr_read.
  ASSIGN lr_read->* TO .
read all necessary values
  CALL METHOD lo_char_1->read_value
    EXPORTING
      it_sel   = lt_sel_1
    IMPORTING
      et_value = .
prepare text field names
  CLEAR: l_txt_1,
         l_txt_2.
  ASSIGN COMPONENT 'TXTMI'
    OF STRUCTURE .
      IF sy-subrc IS INITIAL.
        l_txt_2 = 'TXTSH'.
      ENDIF.
    ENDIF.
  ENDIF.
fill texts and convert output
  LOOP AT .
  value conversion
    LOOP AT lt_field INTO l_fieldname.
      ASSIGN COMPONENT l_fieldname
        OF STRUCTURE .
  text processing