Reg Re-authentication for Tcode access

Question

Dear All,
    I want to enable Re-authentication for certain tcode access in my SAP ABAP system. The SAP as such supports this with the SSF settings. I have the SSF working but am not sure how to enable the particular tcode for Re-authentication.For example i have created a z code zAl08 out of Al08 for test purpose.When an user tries to access zAL08 he should be asked to give his credentials for authentication and then should be able to access the tcode.
1.Is this possible. (am already using a Security product working properly in my environment)
2.How to configure(Steps) the zcode for enabling Re-authentication?
Regards,
Karthik

Answer 1

Basically, what I said was:
function auth_check_tcode.
""Lokale Schnittstelle:
*"  IMPORTING
*"     VALUE(TCODE) LIKE  TSTC-TCODE
*"  EXCEPTIONS
*"      PARAMETER_ERROR
*"      TRANSACTION_NOT_FOUND
*"      TRANSACTION_LOCKED
*"      TRANSACTION_IS_MENU
*"      MENU_VIA_PARAMETER_TRANSACTION
*"      NOT_AUTHORIZED
Dieser Funktionsbaustein dient als reine Kapsel für den C-Call
auth_check_tcode und ist daher im Gegensatz zu authority_check_tcode
nicht für die Prüfung vor dem Call Transaction gedacht, sondern für
die Fälle, in denen ein Start Transaction geprüft werden soll,
z.B. in der SE93.
authority_check_tcode berücksichtigt wie der Kernel die per SE97
pflegbaren Einträge in der Tabelle tcdcouples.
Berechtigungsprüfung
  call 'AUTH_CHECK_TCODE'
       id 'TCODE' field tcode.
  if sy-subrc = 0.
  auth_check_tcode enthält die Prüfungen von tcode_executable,
  daher im OK-Fall keine Aufruf nötig.
  else.
    perform tcode_executable using tcode.
  Keine Berechtigung für Transaktion &
    message i077(s#) with tcode raising not_authorized.
  endif.
endfunction.
      FORM tcode_executable                                         *
-->  TCODE                                                         *
form tcode_executable using tcode.
  call 'DY_CHECK_TRANSACTION'
    id 'TX' field tcode.
  case sy-subrc.
    when 0.         " Alles ok, return
    when 1.         " Parameter Error
      message i274(00) raising parameter_error.
    when 2.         " Transaktion nicht gefunden
      message i343(s#) with tcode raising transaction_not_found.
    when 3.         " Transaktion gesperrt
      message i348(s#) with tcode raising transaction_locked.
    when 4.         " Transaktion ist Bereichsmenü
      message i037(oz) with tcode raising transaction_is_menu.
    when 5.         " Bereichsmenü via Parameter-Transaktion
      message i350(s#) with tcode
                       raising menu_via_parameter_transaction.
    when 6.   " Nicht berechtigt; vorgesehen, aber nicht implementiert
      message i077(s#) with tcode raising not_authorized.
  endcase.
endform.                    "tcode_executable
</pre>
Sorry, the comments are in German. But as you can see, there is no exit and the checks are in the kernel only.
My hat is safe...
Cheers,
Julius
Edited by: Julius Bussche on Jul 29, 2009 5:55 PM