How to modify authorization check for tcode pa30

Hi all,
To execute pa30 tcode the auth object p_orgin is required.
The auth object p_orgin contains the following fields:
AUTHC Authorization level
INFTY Infotype
PERSA Personnel Area
PERSG Employee Group
PERSK Employee Subgroup
SUBTY Subtype
VDSK1 Organizational Key
Our requirement is to add another field to the above object ie P_ORGIN
BTRTL Personnel Subarea, so that the restriction can be imposed on sub area basis without writing an additional z report or adding a z table.
I have added the same to P_ORGIN via su24 but the it is not working.
Pl guide if it is possible to do so and how.
Thanks in advance.
Regards

Hi Manas,
Not possible as of now though it is an intutive idea from your side )
This is because when introducing authority check using function modules Authority_Check a lot of times you would also give the value that should be present in user profile in order to validate the check .Now I dont think even with present levels of AI it is possible to do that because no system will be able to dynamically guage what exactly is in the mind of the user.
And additionally P_ORIGIN will be actually used in several reports where requirements will be different!!
Regards.
Ruchit.

Similar Messages

Authorization checks for PNP LDB

question : how to validate authorization checks for pnp logical database?
2 nd question: hr report
this report is basically for salary survey. in this i had so many fields can any body let me know how
can i form the internal tables. and i have to display overall 150 fields in csv file for that
how can i take in to the final internal table.
what is the logic behind this:
T71JPR09-JOBCODE
PA0000-PERNR
HRP1000-STEXT
P0006-PSTLZ
PA0008-ANSAL * 100 / PA0008-BSGRD
PA0015-BETRG
PA0761-LTEXT WHERE PA0761-CPLAN = LTI PLAN PSU YEAR 1
PA0761-GRADT WHERE PA0761-CPLAN = LTI PLAN PSU YEAR 1
PA0761-ZZGRANT WHERE PA0761-CPLAN = LTI PLAN PSU YEAR 1
PA0761-LTEXT WHERE PA0761-CPLAN = LTI PLAN esu YEAR 1
like that i had.
please give me the steps how can i proceed.

Hi,
The PNP database will take care of authorization check. It will not execute if used does not have authorizations.
Hope this helps.

Authorization check for a program/table

Hi ,
Can anyone help me out in
How to do authorization check for an abap program and also a table.
I have no idea about the authorizations.
My requirement is that I need to do the authorization check in such a manner that only users having a certain profile
1. should be able to execute the program
2. View of the entries of the table.
Thanks & Regards,
Keerthi

Hello Keerhi ,
I got you wrong at first!
If you want to have only certain users to be able to do certain operations, then you need to assign the appropriate roles to those users!
First find the role
second add the user in the role ( PFCG T code---> USers tab)
Raj

Authorization check for select-options field - Company code.

Hi experts,
i have company code field on the report selection screen and i have to validate the authorization check for BUKRS.
How to do authorization check for a select-options field?
Any function modules used to write the authorization check for a SELECT-OPTIONS FIELD?
Thanks.

>
RNB wrote:
> Any function modules used to write the authorization check for a SELECT-OPTIONS FIELD?
Does it hurt to type a few lines of code? Why do you need an FM for this my friend?
Anyways can you please tell which SAP application area (viz. FI, SD etc.) do you want to run the report?
Suhas

How add Authorization check for user with assigened role for t.code-MIR4

Hi All,
Regarding authorization how to check authorizations check for user whith assigned roles for the t.code MIR4 using ABAP.
In Detail:2) All users are allowed to go to MIR4(invoice number), But ONLY for users with role: MM_RELEASE_INVOICE can proceed to do the posting.
suggest me...
Thanks,
srii..

Hi Sri ,
first u need to find out in which user rules u are using this object , after that if u want to restrict users then remove create/change values from that object values .
make use of Tcode SUIM to find out all roles which are using this Object.
or
ask ur basis guy to remove authorizations to create/change....
regards
Prabhu

How to turn off the authorization checks for a object in infoproviders?

Hi - how can I turn off the authorization check for an object (ex: 0orgunit) in infoproviders?
I have 0orgunit as an authorization-relevant object and is used in one of the cubes. When reports are run for this cube, this is causing authorization issues. The object is present in other cubes also but I have to remove or turn off the authorization check of this cube alone. How to do this? Please help.
Thanks,
Raj.

Hi Raj,
Srinivas, is right , however in BI7 the correct transaction is RSECADMIN and not RSADMIN.
In BW3.5, use RSSM transaction to do thins.
OR
Go to transaction RSECAUTH ---> Choose the authorization object that has been created for org unit(and has been assigned to the user). Go to change mode. Remove the cube from the dimension 0TCAIPROV
If you are using old authorization concept in 3.5 or in 7.0
Go to RSSM. In the checks for infoprovider, enter your infoprovider name. Choose change.Here you will see a checkbox to switch off the authorization.
Hope this helps you,
Best regards,
Sunmit.

How can I remove this extra authorization check for dynamic parameters

Hello expert,
I created a new dynamic hirarchical parameters as " client-->policy" in crystal report. these parameter value are coming from a physical table. the other part of report extract data by a oracle procedure. when I ran this report in client, it is ok for everything. but when I schedule it or run it in infoview, I need extra authorization for access these dynamic parameter, eventhough this is not for accessing other parameters. How can I remove this extra authorization check for dynamic parameters?

Hi
Open the crystal designer  Edit the parameter In the prompt window at the existing option you can find the LOV name.
Open the Business view manager and find that prompt name in u201CRepository Exploreru201D window and select that parameter  right click that parameter  Select edit rights  provide rights for your user name in that window.
--Naga

Authorization check for CO88

Dear all,
I found there is no authorization check for plant in CO88, this means if user do not enter the plant, then all the orders will be settled, would anyone tell me how to control this?
thanks,
Ben

Ben,
You can control this by creating seperate roles and giving plantwise authorization in these roles.. Please check Tcode PFCG for further details...
Thanks

Create authorization check for a report

Hi,
I need to create an authorization check for a report. It means that I need to restrict the usage of the report to couple of users ( 'USER1' and 'USER2' ). How can I do that? I did read through a lot of threads regarding this piece got a bit confused and stuck while creating the authorization object.
Say the report name is ZHR_TIMEABC.
Can anyone explain how to create an authorization object and how are they tied to the object and call them in the abap code?
Thanks in advance,
VG

Hi,
Thanks. Here is my understanding, S_C_FUNCT calls a system generated function module to make an authority check. So, if different users say USER1 and USER2 have different authroization levels, defined in their user profile, just adding this piece code will take care of authroization check for the program OR do I need to take care of something else?
If so, when do we need to create the authorization objects using SU20 and assign the group and follo this process? When do we use this approach ( lot of threads on authority check have mentioned this procedure)?
Your inputs will be helpful to understand this concept.
Thanks,
VG

Authorization Check for Special Stock Indicator in IE02

Dear Gurus,
Would like to check with you if there is an authorization check for change in Special Stock Indicator in IE02-SerData Tab?
For example, the User will only be allowed to change the Special Stock Indicator only to "E" - Sales Order.
Would appreciate your help.
Thanks.

Hi,
This cannot be done by using standard auth object. Standard SAP doesnt support control via this field.
Take help of your ABAP team and create an customized authorization object "Z_OBJECT" with field SOBKZ and which check these field value in table EQBS. Assign this auth object to role and profile you want.
Use the user exit IEQM0003 Additional checks before equipment update. Give a logic to check auth object when while using equipment change tcode.

Authorization check of Tcode FCH7 (reprint check) / FCHN (display check)

Hello to you all,
Does any of you know of an option of extended the authorization check of Tcode FCH7 (reprint check) / FCHN (display check) using authorization object F_BKPF_BEK / F_LFA1_BEK?
Regards,
yoav Bernstain

Hi,
Authroization: User need authroization to post Financial Accounting Document for Vendor
Object: F_BKPF_BEK
Activities: 01-Creat, 02-Change and 06-Deleter
Authroization: User need authroization for vendor Master Data (03-Display activity can also work)
Object: F_LFA1_BEK
Activities: 01-Creat, 02-Change, 03-Display and 06-Deleter
Regards,
Prashant Rane

No ICF authorization CHECK for executing /sap/bc/bsp/sap/hap_document

In EP we are trying to access bsp
and we are getting error ,User T000209 (client 350) has no ICF authorization CHECK for executing /sap/bc/bsp/sap/hap_document
How to give authorization please help
venkateswararao

First Check is the ICF service is active using the SICF transaction.
Then Check for the authorization objects SAP_HR_HAP_EMPLOYEE
and SAP_HR_HAP_MANAGER.
Add the above roles to your user , it should work

How to create authorization role for just displaying query prefix Q and X.

Hi Expert,
I hope someone can help me on how to create authorization role for just displaying and executing BEX Queries prefix Q and X. I'm currently using SAP BI 7.1.
Actually, I already created one role called : Z_FORINDO_ONLYDISPLAY_QX
where I only put in the Authorization Component (in the Role Maintenance - Tcode 'pfcg'):
-->Manually Business Information Warehouse
--> Manually Business Explorer - Components
Activity : Display, Execute, Enter, Include, Assign
InfoArea : *
InfoCube : *
Name(ID) of a reporting component : *
Type of a reporting component : Calculated key figure, Restricted key figure, Template structure
--> Manually Business Explorer - Components
Activity : Display, Execute
InfoArea : *
InfoCube : *
Name(ID) of a reporting component : Q* , X*
Type of a reporting component : Query
But, the problem is I still can make changes on that queries (Q* and X*). Even, I still can run query with prefix Z. I use S_RS_RREPU Tamplete for Query Display and execution.
Please assist. Very much appreciate your help. Thanks.
Edited by: nadiyah salleh on Mar 18, 2008 11:22 AM

Question close. This issue has been resolved.

How to deactivate authorization check?

hi ,
how to deactivate Authorization check?
thanks.
reddy.

Use switch T77S0 to control the use of an authorization object during the authorization check.
If value is 0 authorization check is inactive, if value is 1 inactive. See example below.
AUTSW     ADAYS            15     HR: tolerance time for authorization check
AUTSW     APPRO     0     HR: Test procedures
AUTSW     DFCON     1     HR: Default Position (Context)
AUTSW     INCON     0     HR: Master Data (Context)
AUTSW     NNCON     0     HR:Customer-Specific Authorization Check (Context)
AUTSW     NNNNN     0     HR: Customer-specific authorization check
AUTSW     ORGIN     1     HR: Master data
AUTSW     ORGPD     0     HR: Structural authorization check
AUTSW     ORGXX     0     HR: Master data - Extended check
AUTSW     PERNR     1     HR: Master data - Personnel number check
AUTSW     VACAU          Activate Auths for Maintaining Vacancies (PBAY)
AUTSW     XXCON     0     HR: Master Data - Enhanced Check (Context)
http://help.sap.com/saphelp_erp60_sp/helpdata/EN/84/49ba3b3bf00152e10000000a114084/frameset.htm
Regards,
David

How to avoid authorization checks while debugging

Hi,
Can anyone let me to know how to avoid authorization checks while debugging
for a standard transaction?
-B S B

Hello BSB,
To start the debug put /hs will start the system debug.
Then place the break points aat STATEMENT -- MESSAGE and F8
So now the system will stop at the point where it throwing the error message change the value of SY-SUBRC to 0 from 4.
Regards,
Vasanth

How to modify authorization check for tcode pa30

Similar Messages

Maybe you are looking for