Skipping Authorisation checks in LDB

Hi All,
I am working on HR module and I have got to work on a report which is using LDB (Logical DataBase).LDB will do authorisation checks by default.
1) My requirement is to skip the authorisation checks and allow all the data to be retrieved.
Can this be done by calling any standard FM ? If yes , please name it.
regards,
PP

//LDB will do authorisation checks by default.
in my opinion you are looking for a data retrieval process from report development point of view.
Ok say you are pulling data from infotype -08 which is sensitive information. now you need a entry for the object of this and then you are allowed to select on this table.
keep an authority-check on this table pa0008 and if you have the access then you will proceed or else dont pull the records.
Authority-object / Authority -check from program perspective will do .
ex:
AUTHORITY-CHECK OBJECT 'Z_TCODE'
ID 'ACTVT' FIELD '03' " read access
ID 'ZTCODE' FIELD p_tcode. " actual value
IF sy-subrc EQ 0. " check authorization
* fetch record
SELECT SINGLE *
FROM tstc
INTO wa_tstc
WHERE tcode EQ p_tcode.
Br,
Vijay.

Similar Messages

How to Skip Authorisation Checks when i use LDB PNPCE

Hi Experts,
I have requirement to skip authorization checks in PNPCE LDB.
Please let me know how it is possible , it is quite urgent
Thanks a lot in Advance!
Regards,
Akila
Moderator message: do not skip authorization checks, do not post "urgent" issues here.
Edited by: Thomas Zloch on Aug 7, 2011 9:53 PM

Hi Akila,
Its not the good idea to ignore the authorization check, There should be a legitimate reason why it has implemented at first place?
(If programmatic)The one who implemented the Auth check is he right person to approach how to ignore,just a matter of checking sy-subrc(But i would hesitate to apply that) . Or if this applied by roles then Security person might help you.
@Prasenjit: How Dummy value could serve this purpose?
Cheers
Amit

Skipping Authorization check in LDB

Hi Experts,
I have developed a report using PNPCE LDB which displays organizational data and data from infotypes 0000,0001,0006,0017,0019,0020,0027,0105,0315 in the form of ALV.
Currently, if the person who runs the report doesnt have authorization for any of the above infotypes, the report completely errors out with message 'No authorization for infotype xxxx' . this happens in GET PERAS in method CHECK_MIN_INFTY_AUTHORIZATION of class CL_HRPAD00AUTH_CHECK_STD.
but my client wants the different functionality. If the person who is running the report doesnt have authorization for any particular infotype (for ex 0002) then data from that infotype should not appear in the output but data from other infotypes for which he has authorizations should be displayed.(error message should not be displayed).
Please suggest me how to meet above requirement.

Hi
Try setting the PNP_SW_SKIP_PERNR to 'N' Initialization.

How to skip authorisation for infotype when using dynamic selection ?

Hi folks,
I have a problem here.
When im using dynamic selection screen, i cannot skip authorisation for subtypes of an infotype. Eg. if my record for 0185 have records that do not have authorisation for the subtypes. Dynamic selection will filter away this record and will not get me into the Get Peras as id i use to run has authorisation configured. IT will skip out of Get Peras.
However, if im not using dynamic selection screen, i will use the normal pnpce fields, i will be able to get the record, as i do my authorisation check using function module in the get peras, and i did not declare 0185 in the infotypes.
May i know if there is any solution to this problem as dynamic selection screen is a standard...
Thanks,
lihui

hi,
however i cannot skip authorisation for the whole pernr as i need the authorisations for the processing reports.
Currently the case is like this..
i have a authorisations for infotype 0185. i have 2 subtypes records such as ZA and ZB. the user does not have authorisation to read ZB but has authorisation to read ZA.
However, when use dynamic selection, it will skip out the pernr.
If the pernr 0185 records has only ZA subtype but no ZB subtype, it will not skip this pernr when using dynamic selection.
Anymore idea how to overcome this?

How to put Authorisation Check?

Hi,
I have built a Module Program. In this there is a Save Button where information in the screen is saved to a Z table.
I need to put an Authorisation check to this save button. That is only users who have Save capability could save.
Simply there should be an authorisation check before the Save where it will check if the User has the Save option.
Please guide me on how to do this.
Thanks,
Kishan

Hi Kishan,
1. AUTHORITY-CHECK
   The above statement is required for authority checking.
    Just see help on it for syntax purpose.
2. Moreover,
   u will also have to know which authorisation object
   is necessary for your purpose.
   (or else new authorisation object may need tobe created)
Hope the above helps.
Regards,
Amit M.

Authorisation check in report

Hi ,
we have developed a z report which is fetching grade from infotype 8 .All the users here dont have authorisation for infotype 8.Is it possible somehow that the users who don have authorisation for infotype 8 can rum that report.Right now when they are trying to run the report its showing 'No Authorisation for infotype 8'.Or is there some other place from which grade can be retrieved .
Regards
Saurabh

Create an authorisation object (SU21)
Put an authorisation check for this object in your report (AUTHORITY-CHECK)
Create a role that contains this object (PFCG)
Assign this role to all the users who require access to the report (SU01).
<REMOVED BY MODERATOR>
Edited by: Alvaro Tejada Galindo on Feb 27, 2008 2:07 PM

User authorisation check in ABAP-HR program

Hi,
Can anyone please help me on the following query ?
I need to check user authorisation in an ABAP report at Object level, filter only relevant records based on the user's authorisation and display appropriate messages.
The above mentioned report is purely developed by us and is not a copy of any standard report. Hence, kindly help me with your suggestions and opinions.
Thanks and Regards,
Manas Menon

Create an authorisation object (SU21)
Put an authorisation check for this object in your report (AUTHORITY-CHECK)
Create a role that contains this object (PFCG)
Assign this role to all the users who require access to the report (SU01).
<REMOVED BY MODERATOR>
Edited by: Alvaro Tejada Galindo on Feb 27, 2008 2:07 PM

Macro to switch off authorization check in LDB

Hello Folks,
Could anyone share the macro to switchoff autorization check in LDB for a particular program.
Regards,
Nishanth Kumar

not answered

After installing SL: autochk program not found - skipping auto check

My MacBook was setup to dual boot Leopard/Win XP via Boot Camp, but I just formatted the Leopard partition and installed Snow Leopard in its place, which boots wonderfully, but now when I boot Win XP I get this error: "autochk program not found - skipping auto check"
Seconds later the machine automatically reboots.
I booted off the Win XP disk and ran chkdsk /p in the Recovery Console, but the "autochk not found" message still kills the Win XP boot.
Snow Leopard and Win XP are in different partitions on the same drive. I only formatted and reinstalled the Mac OS partition, I did not format or reinstall the Win XP partition.
Help?

I have the same problem. I had decided not to upgrade Parallels from version 3.0 since hardly (or almost never) use windows programs any more. I did want the option of using Boot Camp and Windows if ever needed though.
I installed Snow Leopard knowing that Parallels would no longer work and later did an uninstall. When I tried a restart to open Windows from Boot Camp I got the "autochk not found" message.
Searching around I discovered that Parallels changes the disk table so that the OS can only boot from within Parallels. The problem appears to be a way of changing the disk table back to a setting that will make it boot normally. There is a utility available for doing this on a windows PC, but I've found nothing for the Mac yet.
Without doing a complete re-install of Windows OS, I'm stuck for another solution.
In the end I may just have to erase the drive (the Windows partition) and be done with it for good. What upsets me is that Parallels should have created an uninstall utility that reverted the disk table back to normal boot settings.

How to skip required check on mandatory field of selection screen

Hi expert,
In my report, I define two rodiobutton to show block1 or block2, but every time I click each radiobutton, the message "Fill in all required entry" shown, so my question is how can I skip required check when click radiabutton?
Some of my selection-screen code is :
PARAMETER: P_block1 RADIOBUTTON GROUP GRP1 DEFAULT 'X' USER-COMMAND UC1.
PARAMETER: P_block2 RADIOBUTTON GROUP GRP1.
SELECT-OPTIONS S_ERDAT FOR VBRK-ERDAT OBLIGATORY.

Hi,
If you dont want PAI to be triggered when you select the radio button, then you can remove the USER-COMMAND while declaring parameter.
If User Command is necessary, use following code
PARAMETER: P_block1 RADIOBUTTON GROUP GRP1 DEFAULT 'X' USER-COMMAND UC1.
PARAMETER: P_block2 RADIOBUTTON GROUP GRP1.
SELECT-OPTIONS S_ERDAT FOR VBRK-ERDAT .
AT SELECTION-SCREEN.
CHECK SY-UCOMM NE 'UC1'.
IF S_ERDAT IS INITIAL.
MESSAGE E038(001) WITH 'ERDAT IS MANDATORY'.
ENDIF.
Please Reward points.

Authorisation check for Object F_BL_BANK using transaction F110

Hi
Can you help me with transaction F110. The object F_BL_BANK has been linked on SU24 to transaction F110. It has also been set for Check/maintain.
There is no authorisation check for this object using F110.
How can we resolve the issue.

Hi
We are on 4.6
I linked the object but the program is not doing an authority check The F_BL_BANK object has the following linked to it
. .     . Check          F_BKPF_BUP Accounting Document: Authorization for Posting Periods
. . .     Check/maintain F_BL_BANK Authorization for House Banks and Payment Methods
. .     . Check          F_KNA1_APP Customer: Application Authorization
. .     . Check          F_KNA1_BED Customer: Account Authorization
. .     . Check          F_KNA1_BUK Customer: Authorization for Company Codes
. .     . Check          F_KNA1_GEN Customer: Central Data
. .     . Check          F_KNA1_GRP Customer: Account Group Authorization
. .     . Check          F_LFA1_APP Vendor: Application Authorization
. .     . Check          F_LFA1_BEK Vendor: Account Authorization
. .     . Check          F_LFA1_BUK Vendor: Authorization for Company Codes
. .     . Check          F_LFA1_GEN Vendor: Central Data
. .     . Check          F_LFA1_GRP Vendor: Account Group Authorization
. .     . Check          F_PAYR_BUK Check Management: Action Authorization for Company Codes
. . .     Check/maintain F_REGU_BUK Automatic Payment: Activity Authorization for Company Code
. . .     Check/maintain F_REGU_KOA Automatic Payment: Activity Authorization for Account Type
. .     . Check          PLOG       Personnel Planning
. .     . Check          P_ABAP     HR: Reporting
Ther are more objects but these are the key ones The object also has a custom object in that was build by SAP called ZLSCH      Payment method We want the system to do a check on the payment method

Mov Type - Authorisation Check

Hi Everybody
I want to control my mov types thru the Authorisation check ie Suppose there is a Log in "x" , and I dont want to give hime the Atuthorisation of mov type 551/552 under mb1a Tcode but rest all Mov types can be used by him .
Pls advice how to go ahead for the same
Rgds
Manoj

Manoj,
This can be controlled by std authorisation object check. This will be given by basis in PFCG transaction. The setting in the relevant authorisation object example M_MSEG_BWA has to be provided.
The movement type will appear as one of the parameters while a specific authorisation for a transaction is given. The movement type could be restricted here.
Regards
Ram

How to add authorisation check to a program?

Hi all :
Could you please tell me how to add authorisation check to a program?
Thanks a lot.

Hi,
Check SAP help for authority-check. You can search on SDN on that.
AUTHORITY-CHECK
Basic form
AUTHORITY-CHECK OBJECT object
ID name1 FIELD f1
ID name2 FIELD f2
ID name10 FIELD f10.
Thanks
Nidhi

Authorisation checks in NWBC

Dear All,
Is there a way, other than testing and tracing, we can get to know the list of authorization objects which get checked for various NWBC functionalities?
Or if I move from one Service pack of GRC to another, is some list of new authorization object checks for webdynpro, available?
Thanks

Hi Paramjit
You will not get an exact list of what is needed. You can look at the SAP_GRAC* roles as a base of what is needed and refine the access. You can also look at the GRAC authorisation objects.
Security does not appear to change much between a support pack unless SAP identified a missing or incorrect authorisation check. Looking at the notes for the SP may help you identify these changes
Ultimately, trial/error and testing/investigation. SAP standard roles are a starting point but then you will need to determine if you need to restrict access further.
Regards
Colleen

OSA - Authorisation Checks

Hi all:
In my client's appraisal form, only the employee can fill in the form. They will also have to specify their manager's name as the appraiser.
I tried to use "Default Manager" BADI for my appraisal form. However, this is not a complete functionality because the appraisee can simply change the appraiser's name, after system defaults. There is no control on the appraiser chosen. I can even choose my subordinate as my appraiser, which is not correct.
I know that in "Processing" tab, we can de-select "No Authorisation Check for Appraiser". This feature will check if the user (in my case, the appraisee) has authorisation for the appraiser etc. A few questions I would like to find out:
1) Will this functionality meet my requirement?
2) To use this functionality, do I need structural authorisation or just non-structural authorisation?
3) Should i use BADI "Authority Check" instead, to cater to my requirement?
Many thanks for your advice in advance.
Thank you,
Ash

What is an authorisation checks?
To ensure that a user has the appropriate authorizations when he or she performs an action, users are subject to authorization checks.
The following actions are subject to authorization checks that are performed before the start of a program or table maintenance and which the SAP applications cannot avoid:
·        Starting SAP transactions (authorization object S_TCODE)
·        Starting reports (authorization object S_PROGRAM)
·        Calling RFC function modules (authorization object S_RFC)
·        Table maintenance with generic tools (S_TABU_DIS)
How do we provide a basic authorisation check read for a employee? Could anyone help me with the path?
Go to transaction PFCG and provide the role based authorization.

Skipping Authorisation checks in LDB

Similar Messages

Maybe you are looking for