Bapi for maintaining roles

Question

Hi all,
I have to modify role ( adding or deleting Transaction to role) through program. Do anyone knows BAPI or BADI for that which can do changes in in role.
Can we write BDC for role maintenance?
Regards,
Sandip

Answer 1

Hello Sandip
The following sample reports add a transaction to the role menu. However, by adding a transaction to a role usually additional "objects" are inserted into a role which require maintenance of the authorization values.
*& Report  ZUS_SDN_PFCG_ADD_TCODE
REPORT  zus_sdn_pfcg_add_tcode.
DATA:
  gs_tcodes    TYPE agr_tcodes,
  gt_tcodes    TYPE STANDARD TABLE OF agr_tcodes.
PARAMETERS:
  p_role      TYPE agr_name  DEFAULT 'Z_SDN_ROLE1',
  p_tcode     type tcode     default 'SU01'.
START-OF-SELECTION.
  CALL FUNCTION 'PRGN_1221_READ_TRANSACTIONS'
    EXPORTING
      activity_group              = p_role
*     ONLY_TRANSACTIONS           = ' '
    TABLES
      i_agr_tcodes                = gt_tcodes
*     I_AGR_SELECT                =
    EXCEPTIONS
      no_transactions_found       = 1
      OTHERS                      = 2.
  IF sy-subrc <> 0.
* MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
*         WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
  ENDIF.
  READ TABLE gt_tcodes INTO gs_tcodes INDEX 1.
  gs_tcodes-tcode = p_tcode.
  APPEND gs_tcodes TO gt_tcodes.
  CALL FUNCTION 'PRGN_1221_SAVE_TRANSACTIONS'
    EXPORTING
      activity_group       = p_role
*     DISPLAY_STATUS       = 'X'
    TABLES
      i_agr_tcodes         = gt_tcodes
*     I_AGR_SELECT         =
  CALL FUNCTION 'SUPRN_PROFILE_BATCH'
    EXPORTING
      act_objid                   = p_role
*       LTEXT                       =
*       ENQUEUE                     = ' '
    EXCEPTIONS
      objid_not_found             = 1
      no_authorization            = 2
      generation_not_active       = 3
      empty_authorizations        = 4
      enqueue_failed              = 5
      not_generated               = 6
      OTHERS                      = 7.
  IF sy-subrc <> 0.
    MESSAGE ID sy-msgid TYPE 'S' NUMBER sy-msgno
            WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4.
  ENDIF.
END-OF-SELECTION.
Regards
  Uwe