Forcing Authorization for a transaction code without authorization check in

Transaction code 'PP02' has an authorization object P_TCODE. So when a user who does not have authorization to transaction 'PP02' tries to execute it from command prompt, the SAP system appropriately restricts user saying "You have no authorization".
However, If Ia program has  "Call transaction" verb calling this transaction and if the restricted user runs this report or module program, it does not restrict the user to access the transaction.
Is there any way to restrict user to access the transaction from program without explicitly doing authorization check from within the program?
Jitendra Mehta

Hi Florin:
S_TCODE restricts the user only at command prompt level, not if you run the transaction for program using "CALL TRANSACTION" verb.
If we assign auth.object P_TCODE with some other transaction values (not one for which we want to restrict), then the authority check works for the above.
But say, if I have no other transaction code values to be assigned to auth. object P_TCODE for the restricted user ( therefore, obviously I don't assign auth. object P_TCODE to any auth. profile for the restricted user) then again, I am out of luck.
The only way, I have seen this working is to assign value space ( ' '  ) to auth. object P_TCODE and then assign this auth.object to one of the auth. profiles of the restricted user, BINGO!, then it works.
But our Authorization team has an objection saying "We assign the transactions ( to auth. object ) which the user should have access. It is not  proper to assign a no value to auth. object ( assigning space value ) "
I do not know how much merit their argument has, however, I was wondering if there is another way I could achieve it without relying on tens of hundred of programs doing auth. checks whenever they call the restricted transaction.
Please let me know your thoughts.
Thanks.
Jitendra Mehta

Similar Messages

  • Authorization for a Transaction code

    Hi,
    In ECC 5.0, how can we get an authorization for a transaction code by debugging the code?
    Actually in 4.6C, we used to debug the code & change SY-SUBRC code to '0' & get the authorization for a perticular transaction code.
    Similarly how can we do this in ECC 5.0?
    I tried, but I am not getting where to change the sy-subrc code to '0'.
    Any help or clue is greatly appreciated.
    Thanks,
    Sarika.

    Hi Sarika,
    You can try out this workaround. In function module 'RS_TRANSACTION_TEST' put a breakpoint at statement ' call function 'AUTHORITY_CHECK_TCODE''. Execute the required transaction using tcode SE93.If you don't have the authorization then sy-subrc will be 4 after the above statement. In debugging mode change it to 0. Hope this helps.
    Thanks,
    Roshan Gujaran.

  • No authorization for this transaction with movement type 601

    Dear All,
    This is chandra i am getting this error in delivery level " No authorization for this transaction with movement type 601. If give the authorization for SAP ALL its working fine. If give the authorization for SAP SD T.Codes i am getting this error. Plz help me.
    Thanks and regards
    Chandra

    Dear Chandra,
    Check with -
    T. Code: OMJJ
    Select Movement Type: 601 and Double-Click: "Allowed Transaction" (From Left-hand side) .
    Check whether the Transaction is allowed for Movement Type 601 or not
    Note: if Transaction is not listed (i.e. not allowed) and you wanna allow this Transaction with Movement type 601, then -
    Up-there, Tab: New Entry. Click on it.
    Maintain entry as:
    MovTy: 601
    TCode: As reqd.
    and Save.
    Best Regards,
    Amit

  • You have no authorization for this transaction in plant: M7120

    Hi guys.
    I am getting the error message(M7120) "You have no authorization for this transaction in plant XXXX" when performing 101 movement for production order using MIGO.
    /nsu53 doesn't return any object. Why?

    Hello Arun,
    It is a standard message. SU53 should show the exact authorization object which has been blocked. Or you can also try to check this with T code ST01.
    Refer the below threads & seek help from your basis consultant to get this resolved.
    Authorisation missing
    authorization error in mbbs transaction | SCN
    Regards
    Mangesh S

  • No authorization for this transaction with movement type

    Hi gurus,
      My sd consultant is authorized to execute VLO2N Tcode. But it is giving the error as follows
      "No authorization for this transaction(vlo2n) with movement type 643" ...
    When i try to do the same thing through BASIS ,it gives no error..
    Thanks in Advance,
    Vaibhav Gore.

    Hi Vaibhav,
    T. Code PFCG --> Give particular Role Name then click Change Button -->
    Then Click Autherization Button --> then Click Change Autherisation(pencil)
    Go and Click or Drill down the Material Management : Inventry Management
    1.This is --> Goods Movement  : Storage Location Type :
       Click -->  Movement type (Inventry Management) Press F4 --> u can choose ur valid type
        Like -->  623        GI iss:cust.ret.pack
    Regards
    kesav

  • Authorizations for which transactions are required in BW?

    Hi,
    Can any ony please give some information regarding
    Authorizations for which transactions are required in BW Production Support?
    Regards,
    Aryan

    Hi Aryan,
    Authorizations for the following transactions are required in BW
    1. RSA1
    2. SM37
    3. ST22
    4. ST04
    5. SE38
    6. SE37
    7. SM12
    8. RSKC
    9. SM51
    10. RSRV
    11.RSPC
    13.RSMON
    The Process Chain Maintenance (transaction RSPC) is used to define, change and view process chains.
    Upload Monitor (transaction RSMO or RSRQ (if the request is known)
    The Workload Monitor (transaction ST03) shows important overall key performance indicators (KPIs) for the system performance
    The OS Monitor (transaction ST06) gives you an overview on the current CPU, memory, I/O and network load on an application server instance.
    The database monitor (transaction ST04) checks important performance indicators in the database, such as database size, database buffer quality and database indices.
    The SQL trace (transaction ST05) records all activities on the database and enables you to check long runtimes on a DB table or several similar accesses to the same data.
    The ABAP runtime analysis (transaction SE30)
    The Cache Monitor (accessible with transaction RSRCACHE or from RSRT) shows among other things the cache size and the currently cached queries. The Export/Import Shared buffer determines the cache size; it should be at least 40MB.
    ****Assign Points If Helpful****
    Regards,
    Ravikanth

  • Link authorization object to transaction code

    Hi to all
    how to link authorization object to transaction code?
    i think we can do by using SU24, i am not getting how to do ?
    can any one help me on this Immediately
    Regards
    raadha

    In SU24
    In the Application tab
    Type of Application: 'Transaction'
    Transaction Code:  'Tcode'
    In the Authorization Object tab
    Authorization Object: 'Authorisation object name'
    Type of Application: 'Transaction'
    Then Execute or Press F8...

  • No authorization for this transaction with mvt type 101

    Has anyone seen this error:
    RFC BAPI Wrapper call:You have no authorization for this transaction inplant 1120      
    RFC BAPI Wrapper call:You have no authorization for this transaction with mvt. type 101
    RFC BAPI Wrapper call:You have no authorization for this transaction inplant 1120      
    The strange thing is that when I assign user with a different Personnel Number and it works just fine.  But when I switched back to his Personnel Number, then I get above error.
    Even though I don't get any order list but I got all notifications and technical objects.
    Also, this user has same roles with everyone else.  While everyone is working fine this user is the only one that getting the error and no order download to PDA.
    Regards,
    Dai Ly

    Hi,
    please run ther getlist and getdetail handler in the backend directly for that user - most likely you will get a better failure message there.
    Nevertheless - what Application  yre you using? Is it MAM? If yes, check the SPRO setup for this particular user,
    Regards,
    Oliver

  • For my user id, I have the authorization for the transaction, but still iam getting the error that, you don't have authorization, plz suggest?

    Hello ,
    For my user id, I have the authorization for the transaction, but still iam getting the error that, you don’t have authorization, plz suggest?????
    Thnks

    Hello Sampath,
    after you have received the error message about the no authorization, run transaction SU53.
    This transaction shows which authorization has failed last time.
    Best regards,
    Laszlo

  • Find active user exit for a transaction code

    Hi All,
    Please help to find the active user exit for a transaction code.
    for Ex. below is the list of user exits for package VA ( for creation of sales order and changing sales order). Let me know which user exit is active and which is not active.
      Exit name    Short text
      SDTRM001  Reschedule schedule lines without a new ATP check
      V45A0001  Determine alternative materials for product selection
      V45A0002  Predefine sold-to party in sales document
      V45A0003  Collector for customer function modulpool MV45A
      V45A0004  Copy packing proposal
      V45E0001  Update the purchase order from the sales order
      V45E0002  Data transfer in procurement elements (PRreq., assembly)
      V45L0001  SD component supplier processing (customer enhancements)
      V45P0001  SD customer function for cross-company code sales
      V45S0001  Update sales document from configuration
      V45S0003  MRP-relevance for incomplete configuration
      V45S0004  Effectivity type in sales order
      V45W0001  SD Service Management: Forward Contract Data to Item
      V46H0001  SD Customer functions for resource-related billing
      V60F0001  SD Billing plan (customer enhancement) diff. to billing plan
    Thanks & Regards,
    Sabu

    Goto TADIR table give program id as R3TR ,Objec type as CMOD and execute.
    You will get all active exits in system.
    Exits related to SD may be in ZSD package.

  • Reg : Enhacement for the transaction code MD04

    Hi experts,
    I have implemented an user exit for the transaction code MD04 where in the stock/requirement list I am supposed to add a new column for the exception number which displays the exception description for the corresponding exception number.
      The coding part for fetching the exception description for the corresponding exception number is done in the include 'ZXM61U03'.
      The problem is in the importing parameter IMDEZEXIT in which all the screen data will be present basing on which the data fetching is done .The AUSKT(Exception number) value is not getting populated . All the other data in the row is getting populated.
    Please suggest e a solution for this.
    Regards,
    Ramkishore.

    Hi
    Hope it will help you.
    reward if help.
    Please use FM MD_STOCK_REQUIREMENTS_LIST_API to get all information for transaction MD04/MD05.
    You might also want to check out the function module API.
    MD_MRP_LIST_API
    and also
    check this link for extracting data from MRP tables:
    http://www.sap-img.com/pp001.htm

  • FI-STANDARD SCRIPT FOR FBCJ TRANSACTION CODE

    Hi All,
    I need to change the standard script for FBCJ transaction code, Can some one help to get the standard Script name.
    Actually i need to remove IDES and place logo.Where to configure the Custom Script.
    Thanks in Advance.

    this is the path to assign customized Sapscript for cash journal
    Financial Accounting Bank accounting Business transaction  Bill of exchange transaction Bill of exchange receivable Bill of exchange receivable Failed payment transactionMake and check settings for correspondence Define form name for cores pending Printing
    please try this i hope that this will be useful to All.
    assign Customized Sapscript in place of the standard one for CASH JOURNAL
    Edited by: NareshBD on May 12, 2011 3:13 PM

  • Restrict the badi for particular transaction code

    hi, i have implemented BADI_FDCB_SUBBAS01 and in the subscreen area 10 i attatched my own module pool program and screen number. my requirement is for FB60 only. and it is working for FB60 fine. the problem is also working for FV60.
    Is there any possibility to restrict for particular transaction code say for FB60.
    Please reply me soon....

    Hi Praveen,
    Since this is a single use badi you have the option to create a new filetr of your own. You can create a filter of type sy-tcode and in your implementation assign it a value of your transaction. Thus if someone else also wants to use it for some other transaction can have a implementation of his own for some other transaction.
    The other way which is though not the recommended way buy easy to use is to put a check before your code on SY_TCODE = your transaction.
    revert for more clarifications if required.
    <b>Always reward points to useful suggestions.</b>
    regards,
    Vikas
    Message was edited by:
            Vikas Taneja

  • Transaction code to repair/check objects

    Hello
    Can somebody remind me transaction code to repair/check objects in BW?
    Thanks

    hi
    you can use rsrv. it  is  for bw objects consistency analysis and repair.
    from transaction code RSRV doc itself :
    Transaction RSRV: BW Data and Metadata Test and Repair Environment.
    Transaction RSRV checks the consistency of data stored in BW. It mostly examines the foreign key relationships between individual tables in the enhanced star schema of the BW system.
    The transaction interface was re-designed for SAP Portals release 3.0A. A brief guide about how to use the transaction follows.
    Starting the Transaction
    You can reach the test and repair environment
    By entering the transaction code RSRV
    From InfoObject maintenance (Transaction RSD1)
    By clicking on the "Analyze" button in the intial screen.
    After selecting a characteristic in the maintenance screen via the "Processing -> Analyze InfoObject" menu option.
    The Initial Screen
    When using the test and repair environment for the first time, the message "Values were not found for all setting parameters" draws your attention to the fact that there aren't any saved settings for your user.
    After confirming the dialog box, you reach the initial screen of the transaction. This is divided into two parts:
    1. On the left-hand side, you can see a tree structure with the pool of available tests.
    2. The right-hand side is empty at first. The tests you have selected will be put here. A selection of tests is called a Test Package here.
    Combined and Elementary Tests
    An Elementary Test is a test that cannot be divided into smaller tests and that can therefore only be executed as a whole.
    In this regard, a Combined Test determines which elementary tests are to be executed after entering the parameters. You can remove individual elementary tests from the test package before carrying out the actual test run, in order to reduce run time, for example.
    Combining a Test Package and Executing it.
    Firstly select one or more tests with drag&drop or by double-clicking. Each selected test appears as a closed folder in the view of your test package. (An exception is elementary tests without parameters: These do not appear as a folder). You can also drag a whole folder of tests from the test pool across to the right-hand screen area; all tests that are located in the hierarchical structure under this folder are then added to the test package. You can also display a short description of the test, if required. Do this right-clicking on a test and choosing "Description" from the context menu.
    Afterwards, you must supply the tests with parameters. Tests without parameters must not be given parameters. You are given notification of this when selecting them. You can enter parameters by double-clicking on a test (or a test package) or by expanding the folder of the test.
    A dialog box appears in which you must enter the required parameters. Input help is often available. After entering the parameters, a folder with the name "Parameter" is added under the test. This contains the parameter values. The test name can change in some circumstances, enabling you to see at first sight for which parameter values the test is to be executed. It is possible to select the same test several times and give it different parameters, which may even be preferable in some situations. When you have supplied the combined test with parameters, the folder with the name "Elementary Tests" is added under this one. It contains the elementary tests, from which the combined test is built. You can delete individual elementary tests in the test pool using drag & drop.
    After supplying all tests with parameters, you can start the test run by clicking on the "Execution" button. After execution, the test icons change from a gray rhombus to a red, yellow or green one, depending on whether the test had errors, warnings or was error-free.
    Test Results
    The test results are written to the application log. Depending on the settings, the system jumps automatically to this display, or you can reach it by clicking on the "Display" button. The results are saved in the database, and can therefore be compared later with additional test runs.
    In the left-hand side of the window, you can see an overview of the most recent test runs. Double-clicking on a folder displays all messages under these nodes as a flat (non-hierarchical) list in the right-hand screen area. Long texts or detail data may be available for individual messages, which can be displayed with a mouse click.
    Repairs
    Some tests can repair inconsistencies and errors. Automatic correction is generally not possible: If entries are missing from the SID table for a characteristic, in which case the lost SIDs are still being used in a dimension table (and the corresponding dimension keys are still being used in the fact table) of an InfoCube, you can only remove the inconsistency by reloading the transaction data of the InfoCube. Also note that you must make repairs in the correct sequence. You must always read the documentation for the test and have a good idea about how the error occured, before making the repairs.
    After executing the test run, go from the application log back to the initial screen to make these repairs. Click on the "Fix Errors" button to start an error run. Since the dataset could have changed between the test and the repair run, the required tests are executed again before the actual repair. The results can be found in the application log once again.
    Test Packages
    The test package is deleted if you do not save the test package in the display before leaving the test environment. Choose "Test Packages -> Save Test Package" in the option menu. You can do the following via options in the "Test Package" menu:
    Load packages
    Load for processing - the package is then locked against changes by others.
    Delete and
    Schedule execution at a later date or at regular intervals in background processing
    Settings
    In the "Settings" menu option, you can make settings (adjust the size of the screen areas, for example) and save them. The settings are automatically read when starting the test environment. Support packages are being delivered with additional settings options since the test environment is under development at the moment. A message notifies the user at the start if there aren't any values for the setting options.
    Jobs Menu Option
    You can access the job overview via the Jobs -> Job Overview menu. Use this when you want to check the status of a test package you have scheduled.
    Application Log Menu Option
    You can display old logs from previous test runs in the dialog box, as well as scheduled ones. The option of deleting test logs can also be found here.
    New Selection Button
    The currently selected test package is deleted when you press this button.
    Filter Button
    After a test run, click on this button to remove all elementary tests without errors or warnings from the test package.
    Executing Test Packages in Process Chains
    You can add a process chain to the ABAP Programm RSRV_JOB_RUNNER in the process chain maintenance transaction, RSPC. To do this, use drag & drop to select the process type "ABAP Program" under "General Services" in the process type view. When maintaining process variants you will be asked for the program name and a program variant. Enter RSRV_JOB_RUNNER for the program name. Choose a program variant name and click on "Change". In the next screen you are able to either change or display an already existing variant, or create a new variant. When creating a new variant you will be asked for the following: Package name (an imput help on this is available), the detail level for the log to which the RSRV log in the process chain log is to be integrated, and a message type severity at which process chain processing should be terminated.
    The RSRV process log in the process chain is built as follows:
    First is a summary specifying whether errors, warnings, or no errors occurred for each elementary test.
    A log view of the RSRV test package at the specified detail level follows.
    Example: If you choose the value '3' for the detail level, only messages up to and including detail level 3 will be included in the log processes for the process chain. Messages occuring at a lower layer of the test package test are not displayed in this log. Please note that, unlike the application log, the process log does not propagate errors from deep detail levels to low detail levels. For example, if a single detail level 4 error occurs the summary will show that the relevant test delivered an error. However, this error will not be listed in the second part of the log.
    A complete log is always written independantly of the RSRV process log in the process chain. You can view this in the menu option "Application Log->Display Log->From Batch".
    Please note that there is currently no transport object for test packages and that consequently these cannot be transported. Process chains that execute RSRV test packages must therefore be manually postprocessed after a transport to a different system: The relevant test packages must be created.

  • Report to view user nm, authorization objects, activity, transaction code.

    Hi All,
    I want to view a user-wise report that displays the transaction code, authorization objects and activities for which the user has authorization.
    Is there any standard report to view all this at a glance?
    Can anybody help me on this?
    Thanks.

    u can try SUIM tcode
    its really helps u
    regards,
    Abhilash

Maybe you are looking for