Authorizations for the cluster PY

Question

Dear Friends...
I have this issue at this moment...
Authorizations for the cluster PY, they want that some user can see the cluster with the exception of infotype 8 and 62, and the same process in pa30 and ad hoc query, I think in pa30 and adhoc query could use and authorization object, but I don't know if in the cluster works this objects.
if u can give me some help I'll apreaciate.

Answer 1

Hi Ian,
You could use stored procedure like this
IF @object_type='10000044'AND @transaction_type='U'
  BEGIN
     SELECT @error=-1
     SELECT @error_message='Update denied'
  END
However, it seems that you want to protect this action only for certain user?
I think it is not easy (unless you're using SDK).
The problem is, the OBTN table (OIBT only a view) only store the original user who create the batch (field UserSign). So, if user "A" create the batch, and later user "B" want to update it, but you intend to restrict only user "B" while giving access to update the status to user "A", the table OBTN still record the UserSign field with user "A" despite it was actually "B" who update it. So, stored procedure can't read that it was "B" who actually tried to update the batch detail.
Maybe you could use this workaround, you create an UDF in batch object (U_User), and using FMS to update this UDF with active user who login to B1. Therefore, you could amend above stored procedure like this
IF @object_type='10000044'AND @transaction_type='U'
  BEGIN
     DECLARE @U_User AS NVARCHAR(10)
     SELECT @U_User=U_User FROM OBTN WHERE AbsEntry=@list_of_cols_val_tab_del
     IF @U_User IN('1','2','3') -- from USERID field in OUSR table
       BEGIN
          SELECT @error=-1
          SELECT @error_message='Update denied'
       END
  END
Frankly, I haven't try it. Hope this help.
Best Regards,
Hendry Wijaya