To read an authorization profile.

Question

Hi,
I am trying to provide authorization in a HR report. An administrative person can execute the report. At this momet, a user can see the information of all employees. Instead, the users should be restricted for a group of employees who’s organizational key has been assigned in his authorization profile.  I am trying this with P_ORGIN authorization object.  I can use P_orgin with single static organizational key. But, in this report, I have different sets of organization key for different administrative users. Fot this reason, I will need to read the user’s authorization profile to get the set of organizational key. Can anyone tell me how can I read the authorization profile for a particular user who is using the sytem so that the program can check the set of organizational key.   I am using R/3 version 4.6C.

Answer 1

Or more generally (for multiple users:
REPORT ztest NO STANDARD PAGE HEADING LINE-SIZE 255.
TABLES: usref,
        usr11.
DATA: BEGIN OF itab OCCURS 0.
        INCLUDE STRUCTURE usref.
DATA: END OF   itab.
DATA: BEGIN OF itab1 OCCURS 0.
        INCLUDE STRUCTURE usref.
DATA: END OF   itab1.
DATA: BEGIN OF itab2 OCCURS 0,
        user    LIKE usref-user,
        profile LIKE usref-profile,
        ptext   LIKE usr11-ptext,
      END   OF itab2.
DATA: old_prof  LIKE usref-profile,
      prof_desc LIKE usr11-ptext.
itab-user = sy-uname.
APPEND itab.
itab-user = 'USERNAME'.
APPEND itab.
CALL FUNCTION 'SUSR_GET_PROFILES_OF_USER'
     TABLES
          users    = itab
          profiles = itab1.
SORT itab1 BY profile.
LOOP AT itab1.
  IF itab1-profile <> old_prof.
    SELECT SINGLE ptext INTO prof_desc
      FROM usr11
      WHERE langu = sy-langu
      AND   profn = itab1-profile
      AND   aktps = 'A'.
    old_prof = itab1-profile.
  ENDIF.
  itab2-user    = itab1-user.
  itab2-profile = itab1-profile.
  itab2-ptext   = prof_desc.
  APPEND itab2.
ENDLOOP.
SORT itab2 BY user profile.
LOOP AT itab2.
  WRITE: /001 itab2-user, itab2-profile, itab2-ptext.
ENDLOOP.
Rob