RFC method to check authorizations?

Hi gurus,
anybody has experience of checking authorizations via RFC method? Is there any RFC enabled function module in standard system can do that?
Thanks & regards,
Alex

Hi,
Try this FM AUTHORITY_CHECK.
You can call in Remote and you can pass User ID.
You must pass also Authority check you would like test.
Example
CALL FUNCTION 'AUTHORITY_CHECK'
EXPORTING
*   NEW_BUFFERING             = 3
   USER                      = 'SAP*'   "SY-UNAME
    OBJECT                    = S_TCODE " Objet name    This check transaction code
   FIELD1                    = 'TCODE' " Field name of Object
   VALUE1                    = 'VA02'   " Transaction to modify sales Order
*   FIELD2                    = ' '
*   VALUE2                    = ' '
*   FIELD3                    = ' '
*   VALUE3                    = ' '
*   FIELD4                    = ' '
*   VALUE4                    = ' '
*   FIELD5                    = ' '
*   VALUE5                    = ' '
*   FIELD6                    = ' '
*   VALUE6                    = ' '
*   FIELD7                    = ' '
*   VALUE7                    = ' '
*   FIELD8                    = ' '
*   VALUE8                    = ' '
*   FIELD9                    = ' '
*   VALUE9                    = ' '
*   FIELD10                   = ' '
*   VALUE10                   = ' '
EXCEPTIONS
   USER_DONT_EXIST           = 1
   USER_IS_AUTHORIZED        = 2
   USER_NOT_AUTHORIZED       = 3
   USER_IS_LOCKED            = 4
   OTHERS                    = 5
IF SY-SUBRC <> 0.
MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
         WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
ENDIF.
Rgds

Similar Messages

Payment Method Supplement Check Deactivation in F110 for already posted doc

Hi,
Is there a way to Payment Method Supplement Check Deactivation in F110 for already posted documents.
The background: Some invoices are posted for a vendor when there is a pmt supplmnt method "L-large". Subsequently payment method supplement in vendor master was changed to 'S'. There is debit note posted with pmt method supp 'S' in document. Now while doing F110 system is splitting up the payments based on pmt method supplmt and theline item with debit balance is going in error because of debit balance. As a result the debit balance is not getting knocked off with the credit balance line item.
Request you to help us in finding out if there is any way to generate onlyone line item in F110. Please rule out the option of changing the pmt supplmt at document level.
Regards,
nikhil

Hi Nikhil,
If you are not changing the payment supplement in the document, F110 itself will not allow you to change that. You can possibly deactivate the Payment method temporarily in customizing, run the F110 with only the affected vendors. and activate back the payment method supplement in customizing. You can activate this under APP customizing (FBZP) "All company codes" under the control data section
Ron

ERROR! CHECK AUTHORIZATION!

I keep getting a message that says Error! Check Authorization! when I try to transfer from My Digital Editions to my Nook Tablet. Any help would be appreciated.

This doesn't work for me (Win7, Digital Edition v. 4.0.3). I am trying to open epub files with the .acsm extention on a Nook Reader.. Under Help it says the computer is Authorized; when I erase the Authorization it says it's been erased and I close for program (in order to re-authorize). When I reopen the Digital Editions and try to Re-authorize, everything seems to work until I try to open a book and then I get the Error: Check Authorization message.

Possibility that a check/ authorization on Pricing Date - Sales Order

Is there any possibility that a check/ authorization on Pricing Date can be implemented at Sales Order Level.
Regards,

Hi
You cant use authorizations in relation to the pricing date.
I dont know which kind of check you want to make but of course user-exits like mv45afzz is always an option.
Kind regards
Søren Nielsen

How to Check authorizations (user profiles) using eCATT?

Hi All,
Please tell me how to Check authorizations (user profiles) using eCATT?
Thanks in advance.
Regards
Kalyani

Hello ,
Create a script for SU02 transaction in the SAPGUI mode, in the script move to the profiles tab and GETGUI the first profile and loop to all the profiles assigned to the user until you find your required profile.
Other way is to identify the table where the profiles are stored and then create script using GETTAB , pass the user name and retreive all the profiles assigned to tht particular user, loop through profiles untill you find your required profile.
Thanks & Best regards,
Ajay

What is the "Error! Check Authorization" message and why does my Digital Editions crash right after that pops up?

I have authorized the Adobe Digital Editions with both my PC and my eReader. I try to download a library book and I get the "Error! Check Authorization" message. My Digital Editions will then crash.

Hello,
Please download the latest ADE 4.0.3.114137
http://www.adobe.com/solutions/ebook/digital-editions/download.html
Some of the crashes have been fixed in this release.
Thanks for being the part of product improvement.

FYI: Apple provides a method for checking for Activation Lock

Apple have provided a method of checking before purchase that an iOS device isn't Activation Locked.
http://www.idownloadblog.com/2014/10/01/activation-lock-status-check/
Basically you just go to iCloud.com/ActivationLock and enter the IMEI number and a catchpa.

I wasn sure if any Apple reps trolled the boards or not. That is the exact message I sent to Feedback. If enough users send the same message, maybe they'll set something up.
Apple is at risk for losing loyal product loyal customers.
i want to get my son an iPad, but really cannot afford a new one. Even if I buy one with a cracked screen and repair it, I still run the risk of not being able to use it. I know there's a process the previous owner can go through, but sometimes it can or won't get done! especially if it goes through a reseller. Apple will still make some money from me in the App Store and through iTunes, just not through their product store yet.

Report to check authorization object used in customized programs

Hi Guys,
An auditor came and he raised a question to us, he asked whether all of our customized transactions and programs are maintained with authorization checks? The question is how can we check what authorization objects are used for our customized programs and transaction codes? The developer did not maintain the objects used for that program in SU24 table. Is there a program or a report to show us all the authorization object used for a customised program or transaction? Example : T-code MIGO we can check in SU24 table for all the authorization object used. How do we check for customized tcodes? Please advise. Thanks!
Edited by: Jarod Tan on Nov 25, 2010 9:42 AM

Note that some programs are built in such a way that no (visible) auth check is necessary, or even desired at all.
To determine the necessity of an auth check, you should check that starting it has an entry point (tcode, rfc, service) which is appropriately restricted. The rest (whether and where and how a further check is evaluated) is entirely dependent to what the program actually does.
Well designed applications generally have centralized functions and methods, and the checks are in there or a "base check" they use.
Others again use the same in UI programming to determine the visibility of functions, to make the application more intuitive for the user. This on it's own is however not a sufficient auth check to rely on.
Code review is an art form!
Cheers,
Julius

Payment method not check in payments

Hi
If I set some payment method (P) in vendor master data and leave blank payment method in dodument item then F110
create proposal (P) for payment for this document.
Is it possible to turn on checking document items for payment methods when is blank?

Dear Kosmo,
You should delete the payment method into the vendor master data.
Then during the proposal the documents without the payment method will go into exceptions.
I hope this help.
Mauri
PS:
byTransaction FIBF via
the menu path: Environment   > Information system (P/S) or information
system (processes), You can reach some BTE that can be useful:
    o For the item selection call-up point from the tables BSID or BSIK
       the 1820 process interface is available (only as of Release
       4.70).
    o For the bank selection call-up point, you can use the 1810
                                                                 Page 2
       process interface.
    o For the automatic maintenance of the proposal run, you can use
       the 1830 process interface (only as of Release 4.70).
    o In addition to the standard function the 1120 process interface
       is available for the substitution of selected fields.
    o For the document creation call-up point, you can use the two
       publish and subscribe interfaces 1025 and 1030.
    o Within the maintenance of a proposal run (SAPF110O) the 1860
       process interface is available for a further authorization check.
    o In addition, you can execute an individual balance check in the
       program RFF110SSP the option exists within the payment process
       through the 1840 process interface. With this interface, you can
       also implement a user-defined check and thus change the payment
       proposal correspondingly.
Edited by: MAURIZIO BIANCOTTI on Nov 2, 2011 11:48 AM

Check authorization after selection in navigation bar

Hi,
there is a standard entry in the navigation bar "Create service ticket" that calls the view set SrvTViewSet for creation of service tickets. The viewset contains of four standard view areas, SrvtHead, SrvtBus, SrvtPartner, SrvtSLA. We have not modified the views themselves, only the IMPL- class for the SrvtHead since we have modfied methods in the class. The problem occurs when the user do not have the right authorization to create service tickets at all (after she has selected Create service ticket in the navigation bar), then an error message is created saying "Wrong authorization" but the four screens also dumps with message cx_sf_ref_is initial or an exemption has occurred in cx_bsp_element_exception.
First I tried to take care of the authorization check myself in each view of the four but then I thougt that this would not be the correct solution. Instead the user would get an error message when she selects "Create service ticket" in the navigation bar and an error message would appear before showing the Create service ticket view at all. Is this possible? There is two authorization objects created but the standard does not seem to work regarding the authorization check.
Is there anyone having any ideas?
Thank you and goodbye,
Lena

I think what you can do is , replace the Controller for the Navbar view CL_CRM_IC_NAVBARVIEW with your own Custom Class ( do a controller replacement in the Framework Profile )
Then Redefine the Method PROCESS_NAVIGATION_REQUEST
Inside this method , you can check what is the current Nav Link Clicked , if it is 'Create Service Ticket' , perform the Authorization check or whatever you want and if it not successful , raise a Error Message using below Code and have a RETURN statement .
data : lv_msgsrv type ref to cl_bsp_wd_message_service.
lv_msgsrv = cl_bsp_wd_message_service=>get_instance( ).
lv_msgsrv->add_message( ..... ) .

Check Authorization servlet problem

Hi,
This is what I'm getting in my IAS application log after trying to reach a
servlet.
I already checked the security parameters in the deploytooll to make sure
that I'm not using any restrictions.
Can someone help me solving this problem ?
Thank you
Ido
07/Aug/2001 15:24:49:9] error: APPLOGIC-caught_exception: Caught Exception:
[07/Aug/2001 15:24:55:8] error: Exception: SERVLET-execution_failed: Error
in executing servlet CellmazeEntranceServlet: java.lang.NullPointerException
Exception Stack Trace:
java.lang.NullPointerException
at
com.netscape.server.servlet.servletrunner.ServletInfo.checkAuthorization(Unk
nown Source)
at com.netscape.server.servlet.servletrunner.ServletRunner.execute(Unknown
Source)
at com.kivasoft.applogic.AppLogic.execute(Compiled Code)
at com.kivasoft.applogic.AppLogic.execute(Compiled Code)
at com.kivasoft.thread.ThreadBasic.run(Native Method)
at com.kivasoft.thread.ThreadBasic.run(Native Method)
at com.kivasoft.thread.ThreadBasic.run(Native Method)
at com.kivasoft.thread.ThreadBasic.run(Native Method)
at com.kivasoft.thread.ThreadBasic.run(Compiled Code)
at java.lang.Thread.run(Compiled Code)

Hi,
please have a look at the configuration of J2EE authentication and authorization on OC4J, following the OC4J security documentation available in the OracleAs documentation. You don't provide much details on what you did to make it work so its hard to give you any helping hand
Frank

Checking authorization of a tcode//

can i check the authorization objects of a tcode?
i want to assign a user with only a tcode not with the full role.
is there any way that i cud asssign a user with a tcode only with out creating a new role, cud i view some how what particular authorization a tcode is using
thanks
akshat

Akshat,
are you sure that's a good idea...?
First of all - use SU24 to check the objects that are defined for the TCode. Additionally, an authoritzations trace with ST01 will give you certainty.
If you add the TCode manually, you lose that connection. I..e, when you remove the TCode, the user might still have the objects, and these may be harmful in conjunction with a different TCode, meaning that the user will have access to stuff you don't want him to.
We recommend assigning transactions only via the menu, and maintaining SU24 properly.
Kind regards,
Frank.

Availability Check authorization per plant

Hi
How can we set in VA01/VA02, such that user is only allowed to have availability check on certain plants.. and not allowed to check other plants..

One option is through Object assignment in PFCG, this can be achieved. The other method is dont maintain that storage location in MMSC. In fact, you can also consider sale order user exit.
But of these options, I would prefer creating separate roles in PFCG where I assign only those plants for which availability check should happen and assign this role to that user id. The object for this is C_AFKO_AWK
thanks
G. Lakshmipathi

Check Authorization for User ID

hi all,
as per i know, i can check the authentication by check an object as the following
AUTHORITY-CHECK OBJECT 'ZOBJECT'
ID 'ACTVT' FIELD '_____'.
in case i have user id (user does not launch the program by himself) and i want to check the authorization. what can i do on this?
Regards,
Peerasit

Hey Raymond,
your answer hits the point!!
Thanks so much
Regards,
Peerasit
PS thanks for every response as well.

LDB PNP authorization check authorization object

Hi,
I have used LDB PNP for HR reports.
We are using the authority check also, but the problem is all the records/data for all the people is being read by the report where some of the people data should not have been read as they belong to some other personal area that the role of the executer (user).
Hence it appears that authorization check is not working properly.
Following is how I am using it, Please suggest corrections or alternate way to correct this issue.
    rp-provide-from-last p0002 space gwa_outlist-begda
                                                    gwa_outlist-begda.
    IF pnp-sw-found NE '1' OR
        pnp-sw-auth-skipped-record EQ '1'.
        EXIT.
    ELSE.
        ls_tab-vorna = p0002-vorna.
        ls_tab-nachn = p0002-nachn.
    ENDIF.
Please reply with the corrections ore alterations,
Thanks in advance.
Akash.

Hi,
(1)
Actually, if you're wirting report with PNP LDB, you do NOT need to do this hard-coded auth checking at all. Because the LDB abap code behind PNP has already do this job for you.
So all you need to do is to ask you HR consultant or Basis consultant to modify the authority config of certain ROLE with t-code PFCG, and then assign that ROLE to certain user with t-code SU01.
ABAP code behind PNP will automatically verify the current user according to his ROLE setting.
(2)
In some case you do not work with LDB report, then you need to do the authority check by yourself. General function AUTHORITY_CHECK is what you need. AUTHORITY_CHECK do the authority check by means of Authority Object.Belows are authority objects used in HR module(you can also see in PFCG if technial name switched on):
P_ORGIN    HR: Master Data
PLOG       Personnel Planning
P_PCLX     HR: Clusters
P_TCODE    HR: Transaction codes
Sample of checking personal area:
CALL FUNCTION 'AUTHORITY_CHECK'
     EXPORTING
          FIELD1              = ' PERSA'
          OBJECT              = 'P_ORGIN'
          USER                = 'SAPSUPPORT1'
          VALUE1              = 'Z001'
     EXCEPTIONS
          USER_DONT_EXIST     = 1
          USER_IS_AUTHORIZED = 2
          USER_NOT_AUTHORIZED = 3
          USER_IS_LOCKED      = 4
          OTHERS              = 5.
IF SY-SUBRC NE 2.
MESSAGE E001(01) RAISING AUTH_FAILED.
ENDIF.
Reward if helpful pls!

RFC method to check authorizations?

Similar Messages

Maybe you are looking for