Checking authorization of a tcode//

can i check the authorization objects of a tcode?
i want to assign a user with only a tcode not with the full role.
is there any way that i cud asssign a user with a tcode only with out creating a new role, cud i view some how what particular authorization a tcode is using
thanks
akshat

Akshat,
are you sure that's a good idea...?
First of all - use SU24 to check the objects that are defined for the TCode. Additionally, an authoritzations trace with ST01 will give you certainty.
If you add the TCode manually, you lose that connection. I..e, when you remove the TCode, the user might still have the objects, and these may be harmful in conjunction with a different TCode, meaning that the user will have access to stuff you don't want him to.
We recommend assigning transactions only via the menu, and maintaining SU24 properly.
Kind regards,
Frank.

Similar Messages

BATCH INPUT TO CHECK AUTHORIZATION

Hi All,
Can anyone tell me how to code a small batch that will go into sap to ensure system authorizations are set?As the requirement is immediate,quick answers will be highly appreciated.
Rewards if useful.
Thanks n Regards,
Indu.

Hi,
What type of authorization check u need like tcode r any field.
U have follow like that.
AUTHORITY-CHECK OBJECT 'ZPRCHK_NEW' :
         ID 'TCD' FIELD SY-TCODE
         ID 'BUKRS' DUMMY
         ID 'PRCTR' DUMMY
         ID 'SPART' DUMMY
         ID 'WERKS' DUMMY
         ID 'VKORG' DUMMY
         ID 'EKORG' DUMMY.
IF sy-subrc NE 0.
    MESSAGE TEXT-003 TYPE 'E'.
    LEAVE PROGRAM.
ENDIF.
Regards:
Prabu

RFC method to check authorizations?

Hi gurus,
anybody has experience of checking authorizations via RFC method? Is there any RFC enabled function module in standard system can do that?
Thanks & regards,
Alex

Hi,
Try this FM AUTHORITY_CHECK.
You can call in Remote and you can pass User ID.
You must pass also Authority check you would like test.
Example
CALL FUNCTION 'AUTHORITY_CHECK'
EXPORTING
*   NEW_BUFFERING             = 3
   USER                      = 'SAP*'   "SY-UNAME
    OBJECT                    = S_TCODE " Objet name    This check transaction code
   FIELD1                    = 'TCODE' " Field name of Object
   VALUE1                    = 'VA02'   " Transaction to modify sales Order
*   FIELD2                    = ' '
*   VALUE2                    = ' '
*   FIELD3                    = ' '
*   VALUE3                    = ' '
*   FIELD4                    = ' '
*   VALUE4                    = ' '
*   FIELD5                    = ' '
*   VALUE5                    = ' '
*   FIELD6                    = ' '
*   VALUE6                    = ' '
*   FIELD7                    = ' '
*   VALUE7                    = ' '
*   FIELD8                    = ' '
*   VALUE8                    = ' '
*   FIELD9                    = ' '
*   VALUE9                    = ' '
*   FIELD10                   = ' '
*   VALUE10                   = ' '
EXCEPTIONS
   USER_DONT_EXIST           = 1
   USER_IS_AUTHORIZED        = 2
   USER_NOT_AUTHORIZED       = 3
   USER_IS_LOCKED            = 4
   OTHERS                    = 5
IF SY-SUBRC <> 0.
MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
         WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
ENDIF.
Rgds

How to check who locked the Tcode in SM01

Hi to all experts,
Is there a way to check who locked the Tcode in SM01 or in table TSTC?
Thanks in advance.
BR,
Nancy

Dear Nancy,
Check the thread,
[sm01 transaction logs;
Regards,

ERROR! CHECK AUTHORIZATION!

I keep getting a message that says Error! Check Authorization! when I try to transfer from My Digital Editions to my Nook Tablet. Any help would be appreciated.

This doesn't work for me (Win7, Digital Edition v. 4.0.3). I am trying to open epub files with the .acsm extention on a Nook Reader.. Under Help it says the computer is Authorized; when I erase the Authorization it says it's been erased and I close for program (in order to re-authorize). When I reopen the Digital Editions and try to Re-authorize, everything seems to work until I try to open a book and then I get the Error: Check Authorization message.

Possibility that a check/ authorization on Pricing Date - Sales Order

Is there any possibility that a check/ authorization on Pricing Date can be implemented at Sales Order Level.
Regards,

Hi
You cant use authorizations in relation to the pricing date.
I dont know which kind of check you want to make but of course user-exits like mv45afzz is always an option.
Kind regards
Søren Nielsen

How to Check authorizations (user profiles) using eCATT?

Hi All,
Please tell me how to Check authorizations (user profiles) using eCATT?
Thanks in advance.
Regards
Kalyani

Hello ,
Create a script for SU02 transaction in the SAPGUI mode, in the script move to the profiles tab and GETGUI the first profile and loop to all the profiles assigned to the user until you find your required profile.
Other way is to identify the table where the profiles are stored and then create script using GETTAB , pass the user name and retreive all the profiles assigned to tht particular user, loop through profiles untill you find your required profile.
Thanks & Best regards,
Ajay

What is the "Error! Check Authorization" message and why does my Digital Editions crash right after that pops up?

I have authorized the Adobe Digital Editions with both my PC and my eReader. I try to download a library book and I get the "Error! Check Authorization" message. My Digital Editions will then crash.

Hello,
Please download the latest ADE 4.0.3.114137
http://www.adobe.com/solutions/ebook/digital-editions/download.html
Some of the crashes have been fixed in this release.
Thanks for being the part of product improvement.

Check authorization at TCode Z...

Hi All,
I have a problem with authorization, please help me !
I have Tcode for customize report (HR). With user A, for one or two standart tcode, he has aut with Per. Area (10,20,30), but in cust. tcode Z... , he has only one aut in Per. Area (20). I used SU24 to assign aut. object (P_ORGIN) to Tcode Z... to check Personal Area and assign to it P.Area(20). But it not effect. How to do it ! Thanks for all idea !

Hi
Add the auth.object in your coding. Use 'Pattern' in ABAP Editor (SE38) for 'AUTHORITY CHECK'. After manage the error message with the purpose that user know that he or she must run tcode SU53.
Regards
Eduardo
Edited by: E_Hinojosa on Nov 22, 2011 9:20 AM

Report to check authorization object used in customized programs

Hi Guys,
An auditor came and he raised a question to us, he asked whether all of our customized transactions and programs are maintained with authorization checks? The question is how can we check what authorization objects are used for our customized programs and transaction codes? The developer did not maintain the objects used for that program in SU24 table. Is there a program or a report to show us all the authorization object used for a customised program or transaction? Example : T-code MIGO we can check in SU24 table for all the authorization object used. How do we check for customized tcodes? Please advise. Thanks!
Edited by: Jarod Tan on Nov 25, 2010 9:42 AM

Note that some programs are built in such a way that no (visible) auth check is necessary, or even desired at all.
To determine the necessity of an auth check, you should check that starting it has an entry point (tcode, rfc, service) which is appropriately restricted. The rest (whether and where and how a further check is evaluated) is entirely dependent to what the program actually does.
Well designed applications generally have centralized functions and methods, and the checks are in there or a "base check" they use.
Others again use the same in UI programming to determine the visibility of functions, to make the application more intuitive for the user. This on it's own is however not a sufficient auth check to rely on.
Code review is an art form!
Cheers,
Julius

How to know that User having Authorizations to which Tcodes?

Hi,
This is regarding Security.
How can I Find that an User having the authorization to which transations?
SUIM will show me the all transation where the user having authorizations.
But my requirment is, say i will enter 10 T-Codes, then the program should check these T-Codes against with SUIM and show me the result of these 10 T-Codes which the user having the permission.
Is there any standard program to do this? or I need to write a custom program?
Points will be awarded for solution.
Thanks All
Siva

I dont think there is any way through which you can give a list of t-codes and the system will come up with whether the user has authorization to exexute some or all of them or not.
The best way as per me is to goto suim-> transactions->executable for users.
Give the user name and download the list of transactions in an excel file . And finally apply v-lookup with your list of tcodes.

Authorization to Customize Tcode FBS1 Parked Documents

Security Experts,
We created a Z version of transaction code FBS1 reason was to activate the park document option. Problem is that we moved the new tcode into production the next step was to assign the tcode to the various single roles in accounting. however I am seeing two issues,
1- If user has access to FBS1 they can also access ZFBS1 without the tcode being added to their role. user does not have SAP ALL. And When I run a report of executable tcode by this same user new tcode does not comes up. Not sure if after I take out the access of FBS1 it will get fixed. Not sure where to look in security to see if there are any other tcodes like this, where user have access when they are assign to their role.
2- It appears that ZFBS1 behaves different when user have access to FBVO, if user has access to FBVO then ZFBS1 does not park it posts automatically.
Your help will be greatly appreciated,

Hi Frank,
Please check the comments below:
>
> 1- If user has access to FBS1 they can also access ZFBS1 without the tcode being added to their role. user does not have SAP ALL. And When I run a report of executable tcode by this same user new tcode does not comes up. Not sure if after I take out the access of FBS1 it will get fixed. Not sure where to look in security to see if there are any other tcodes like this, where user have access when they are assign to their role.
Sol: Please check S_TCODE in the role whether it contains any value as "Z*". If not let me know.
>
> 2- It appears that ZFBS1 behaves different when user have access to FBVO, if user has access to FBVO then ZFBS1 does not park it posts automatically.
Sol: ZFBS1 cotains the same program as FBS1 and thus checking same objects. These objects are same as checked for FBV0. Though you are restricting values in for ZFBS1, but it is providing other authorizations from the values assigned for FBV0.
Please let me know your further concerns.
Regards,
Dipanjan

Check printing problem in Tcode F110...Urgent

Hi All,
I am getting problem in check printing.
While I am running the Tcode F-58 I am getting check printing exactly in one page.But the problem here is when I am printing the check using Tcode F110 its giving print in 3 or 4 pages.The last page is getting the correct Invoice entry ,but the first three pages are getting prints like VOID**VOID*.
How to delete the first three unwanted pages which contains VOID.
Please let me know abt this issue.
This is an Damm urgent issue.
Thanks in Advance.
Regards,
Sudheer.

Hi,
Well, as it's so urgent.....
This is standard functionality, designed to make sure the cheque paper is correctly linded up in the printer. The number of pages is set in the selection screen of the print program in field 'Number of sample printouts'. Set this to 0 to stop the pages appearing.
Regards,
Nick

Check authorization after selection in navigation bar

Hi,
there is a standard entry in the navigation bar "Create service ticket" that calls the view set SrvTViewSet for creation of service tickets. The viewset contains of four standard view areas, SrvtHead, SrvtBus, SrvtPartner, SrvtSLA. We have not modified the views themselves, only the IMPL- class for the SrvtHead since we have modfied methods in the class. The problem occurs when the user do not have the right authorization to create service tickets at all (after she has selected Create service ticket in the navigation bar), then an error message is created saying "Wrong authorization" but the four screens also dumps with message cx_sf_ref_is initial or an exemption has occurred in cx_bsp_element_exception.
First I tried to take care of the authorization check myself in each view of the four but then I thougt that this would not be the correct solution. Instead the user would get an error message when she selects "Create service ticket" in the navigation bar and an error message would appear before showing the Create service ticket view at all. Is this possible? There is two authorization objects created but the standard does not seem to work regarding the authorization check.
Is there anyone having any ideas?
Thank you and goodbye,
Lena

I think what you can do is , replace the Controller for the Navbar view CL_CRM_IC_NAVBARVIEW with your own Custom Class ( do a controller replacement in the Framework Profile )
Then Redefine the Method PROCESS_NAVIGATION_REQUEST
Inside this method , you can check what is the current Nav Link Clicked , if it is 'Create Service Ticket' , perform the Authorization check or whatever you want and if it not successful , raise a Error Message using below Code and have a RETURN statement .
data : lv_msgsrv type ref to cl_bsp_wd_message_service.
lv_msgsrv = cl_bsp_wd_message_service=>get_instance( ).
lv_msgsrv->add_message( ..... ) .

Check Authorization for User ID

hi all,
as per i know, i can check the authentication by check an object as the following
AUTHORITY-CHECK OBJECT 'ZOBJECT'
ID 'ACTVT' FIELD '_____'.
in case i have user id (user does not launch the program by himself) and i want to check the authorization. what can i do on this?
Regards,
Peerasit

Hey Raymond,
your answer hits the point!!
Thanks so much
Regards,
Peerasit
PS thanks for every response as well.

Checking authorization of a tcode//

Similar Messages

Maybe you are looking for