User authorisation check in ABAP-HR program

Hi,
Can anyone please help me on the following query ?
I need to check user authorisation in an ABAP report at Object level, filter only relevant records based on the user's authorisation and display appropriate messages.
The above mentioned report is purely developed by us and is not a copy of any standard report. Hence, kindly help me with your suggestions and opinions.
Thanks and Regards,
Manas Menon

Create an authorisation object (SU21)
Put an authorisation check for this object in your report (AUTHORITY-CHECK)
Create a role that contains this object (PFCG)
Assign this role to all the users who require access to the report (SU01).
<REMOVED BY MODERATOR>
Edited by: Alvaro Tejada Galindo on Feb 27, 2008 2:07 PM

Similar Messages

Authorisation check in ABAP Query..

Hi Gurus
Can we put Authorization check in ABAP Query ?
Your help is appreciated.
Regards,
Gajanan

Hi,
Please check this online document on how to setup authorization for SAP query.
http://help.sap.com/printdocu/core/Print46c/en/data/pdf/BCSRVQUE/BCSRVQUE.pdf
Regards,
Ferry Lianto

User Authorisations in Dialog Programming.

Hi Friends,
I have a small requirement, I want to create user authorisations in dialog programming.
Actually client requirement is he want to enter absence details of each and every branch.
For that i have created a cusom table and i also i have developed a dialog program inorder to update the details
and to retrive all the data i have created a report program also.
Now the client requirement is he want user authorisations while updating the data through dialog programming, that means if a user loging in that particular branch he want to enter the absence details pertaining to that branch only, when he tries to enter the details of other employee pertaining to another branch an error should be raised.
Actually in the client place they are using authrisation object as 'Z_WERKS'. The basis person has created this and provided for me.
Actually i have created an Authority check in module pool program.Here iam attaching my prog,
Pls provide me the sample code if at all available.
*& Include ZEMPTOP                                           Module pool
PROGRAM ZEMP.
TABLES : ZABS,PA0001.
DATA : WA_PA0001 LIKE PA0001,
       V_ANS.
DATA: BEGIN OF Z_WERKS OCCURS 0,
        PERSA LIKE T500P-PERSA,
        NAME1 LIKE T500P-NAME1,
      END OF Z_WERKS.
*& Include           ZEMPI01
*&      Module USER_COMMAND_0100 INPUT
      text
MODULE USER_COMMAND_0100 INPUT.
CASE SY-UCOMM.
WHEN 'DISP'.
SELECT SINGLE * FROM ZABS WHERE PERNR = ZABS-PERNR.
IF SY-DBCNT <> 0.
*MESSAGE I000(Z00) WITH 'Details of' ZABS-PERNR .
else.
MESSAGE I000(Z00) WITH 'No Details Available to Display'.
ENDIF.
WHEN 'EXIT'.
LEAVE PROGRAM.
WHEN 'BACK' OR 'EXIT' OR 'CANCEL'.
LEAVE TO SCREEN 0.
WHEN 'CLS'.
CLEAR ZABS.
WHEN 'INS'.
INSERT ZABS .
ZABS-ABWTG = ZABS-ENDDA - ZABS-BEGDA + 1.
IF SY-DBCNT <> 0.
MESSAGE I000(Z00) WITH 'Personnel No' ZABS-PERNR
'inserted successfully'.
ENDIF.
CLEAR ZABS.
WHEN 'MOD'.
UPDATE ZABS.
ZABS-ABWTG = ZABS-ENDDA - ZABS-BEGDA + 1.
IF SY-DBCNT <> 0.
MESSAGE I000(Z00) WITH 'Personnel No' ZABS-PERNR
'Modified Successfully'.
ENDIF.
CLEAR ZABS.
*WHEN 'DEL'.
*CALL FUNCTION 'POPUP_TO_CONFIRM_LOSS_OF_DATA'
EXPORTING
   TEXTLINE1           = 'ARE YOU SURE'
   TEXTLINE2           = 'YOU WANT TO DELETE'
   TITEL               = 'CONFIRMATION'
   START_COLUMN        = 25
   START_ROW           = 6
   DEFAULTOPTION       = 'N'
IMPORTING
   ANSWER              = V_ANS.
*IF V_ANS = 'J'.
*DELETE ZABS.
*IF SY-DBCNT <> 0.
*MESSAGE I000(Z00) WITH 'Personnel No' ZABS-PERNR
*'Deleted Successuflly'.
*ELSE.
*MESSAGE I000(Z00) with 'No Record to Delete'.
ENDIF.
*ENDIF.
ENDCASE.
ENDMODULE.                 " USER_COMMAND_0100 INPUT
*&      Module GET_REC INPUT
      text
MODULE GET_REC INPUT.
SELECT SINGLE * FROM PA0001 INTO WA_PA0001
         WHERE PERNR = ZABS-PERNR.
MOVE: WA_PA0001-PERNR TO ZABS-PERNR,
      WA_PA0001-ENAME TO ZABS-ENAME,
      WA_PA0001-GSBER TO ZABS-GSBER,
      WA_PA0001-WERKS TO ZABS-WERKS.
ZABS-ABWTG = ZABS-ENDDA - ZABS-BEGDA + 1.
ENDMODULE.                 " GET_REC INPUT
*&      Module CHECK_AUTH_WERKS INPUT
      text
MODULE CHECK_AUTH_WERKS INPUT.
*SELECT PERSA INTO TABLE _WERKS FROM T500P
        WHERE PERSA = ZABS-WERKS.
AUTHORITY-CHECK OBJECT 'Z_WERKS'
ID 'PERSA' FIELD Z_WERKS-PERSA.

You need to test the sy-subrc after the authority check - that will indicate whether the user has the authorisation or not.. you also often include the activity being tested e.g. generally 03 = Display, 02 = Update etc
AUTHORITY-CHECK OBJECT 'S_TRVL_BKS'
ID 'ACTVT'    FIELD '03'
ID 'CUSTTYPE' FIELD 'B'.
IF not SY-SUBRC is initial.
MESSAGE E...   "put your exception here...
ENDIF.
see [Programming Authorization Checks |http://help.sap.com/saphelp_nw04/helpdata/en/52/6712ac439b11d1896f0000e8322d00/content.htm] for more info.
Jonathan

How to add authorisation check to a program?

Hi all :
Could you please tell me how to add authorisation check to a program?
Thanks a lot.

Hi,
Check SAP help for authority-check. You can search on SDN on that.
AUTHORITY-CHECK
Basic form
AUTHORITY-CHECK OBJECT object
ID name1 FIELD f1
ID name2 FIELD f2
ID name10 FIELD f10.
Thanks
Nidhi

[syntax_error] in Creating New User - After applying SP ABAP & Basis lv 8

Hi Gurus.
actually I already created message to SAP regarding this. but i havent receieve any respond. I post here just in case maybe I can have immediate solution from you guys..
I have 2 system HLC and MFG
which is using same OS and DB
DB Information
DB client lib.     SQL_Server_8.00
DB releases        MSSQL 7.00.699 or higher, MSSQL 8.00.194
DBSL version       700.08
DBSL Patch Level   144
System Information
SAP versions       700
Operating System   Windows NT 5.0, Windows NT 5.1, Windows NT 5.2, Wi
OP release         5.2
which have same Kernel and SP patches
Kernel release    700
Sup.Pkg lvl.      146
SAP_ABA     700     0008     SAPKA70008
SAP_BASIS     700     0008     SAPKB70008
ST-PI 2005_1_700     0006     SAPKITLQI6
PI_BASIS     2005_1_700     0005     SAPKIPYJ75
Problem
previously both of the system HLC and MFG is in level 6 SP ABAP and BASIS
when i try to create EWA report for both of them, i have missing module in the report
and i read a note that i need to upgrade to level 8.
when i upgrade both of them to level 7, then i run sgen and there are no problem on both system
but when i upgrade both of them to level 8
in my MFG system, i can run sgen with no problem.
in my HLC system, i run sgen and it take a long time to validate the programs which are need to be recompiled. so i never run sgen to recompile on HLC system after i update the SP to level 8. but i believe this shouldnt be an issue.
the day after i update the SP, one of my user raise an issue.
(same issue is not happened in MFG system only in HLC system)
when we try to create new user..
SU01 -> create new user -> fill all the details -> save -> abap dumps
Error in the ABAP Application Program
The current ABAP program "/SAPSLL/CL_IM_BP_ADDRESS======CP" had to be
   terminated because it has
come across a statement that unfortunately cannot be executed.
The following syntax error occurred in program "/SAPSLL/SAPLBP_ADDRESS " in
   include "/SAPSLL/LBP_ADDRESSTOP " in
line 22:
"Statement "/SAPSLL/DEBUG_DATA" is not defined. Check your spelling . ."
The include has been created and last changed by:
Created by: "SAP "
Last changed by: "SAP "

Hi all
problem is solved..
after doing some debugging, we found out
there are some missing entries in table TRMAC
so i just copy the missing entries from my MFG server to HLC server since they are both in same condition.
now i am wondering why do the support package miss to enter the rows in TRMAC table >.<
SAPache man..

How to put Authorisation Check?

Hi,
I have built a Module Program. In this there is a Save Button where information in the screen is saved to a Z table.
I need to put an Authorisation check to this save button. That is only users who have Save capability could save.
Simply there should be an authorisation check before the Save where it will check if the User has the Save option.
Please guide me on how to do this.
Thanks,
Kishan

Hi Kishan,
1. AUTHORITY-CHECK
   The above statement is required for authority checking.
    Just see help on it for syntax purpose.
2. Moreover,
   u will also have to know which authorisation object
   is necessary for your purpose.
   (or else new authorisation object may need tobe created)
Hope the above helps.
Regards,
Amit M.

Cannot connect to abap server, please check your abap server connection

Installed new NW BPC 7.5 system on windows 2008 server but get the error as follows
when logon to BPC server:
"Cannot connect to abap server, please check your abap server connection".
"define system user group tab" is inactive in server manager also.
Server Diagnostic errors for SAP Server Connection:
Database Connection
Status Connection Error
as per note 1385864 but this note has not helped get past this status with installation.
User Type value is either set to Communication Data for all three users (BPC_ADMIN, BPC_SYSADMIN, BPC_USER).
and these accounts are not locked.
Any ideas for these errors?
Regards,
Aidan

Hi Aidan,
"Your logon id (domain\user) does not have SystemAdmin rights; some functionality
is disabled."
This is caused by the fact that the user you are logged in as isn't in the UJA_SVR_DEFAULT table, the SYSADMIN field needs to have a value that contains your user id (i.e. DOMAIN\USER) . You can set this up with the UJA3_WRITE_SYS_USERS program.
"When I try to install APPshell the following errors occur:
@8O@ UJA_DATA_CHECK E 006 Application PLANNING's multiprovider /CPMB/ATMKOOE not exist in BW
@8O@ UJS_EXCEPTION E 003 Errors occured during "after import" method call during activation"
Aidan, sounds like something went terribly wrong during your activation process. Do this, Clean the appset with the UJS_ACTIVATE_CONTENT program and make sure that everything is completely deleted. Make sure that there is a lot of memory available for the activation and try it again.
It should work.
Hopefully this helps you.
Cheers, Scott

OSA - Authorisation Checks

Hi all:
In my client's appraisal form, only the employee can fill in the form. They will also have to specify their manager's name as the appraiser.
I tried to use "Default Manager" BADI for my appraisal form. However, this is not a complete functionality because the appraisee can simply change the appraiser's name, after system defaults. There is no control on the appraiser chosen. I can even choose my subordinate as my appraiser, which is not correct.
I know that in "Processing" tab, we can de-select "No Authorisation Check for Appraiser". This feature will check if the user (in my case, the appraisee) has authorisation for the appraiser etc. A few questions I would like to find out:
1) Will this functionality meet my requirement?
2) To use this functionality, do I need structural authorisation or just non-structural authorisation?
3) Should i use BADI "Authority Check" instead, to cater to my requirement?
Many thanks for your advice in advance.
Thank you,
Ash

What is an authorisation checks?
To ensure that a user has the appropriate authorizations when he or she performs an action, users are subject to authorization checks.
The following actions are subject to authorization checks that are performed before the start of a program or table maintenance and which the SAP applications cannot avoid:
·        Starting SAP transactions (authorization object S_TCODE)
·        Starting reports (authorization object S_PROGRAM)
·        Calling RFC function modules (authorization object S_RFC)
·        Table maintenance with generic tools (S_TABU_DIS)
How do we provide a basic authorisation check read for a employee? Could anyone help me with the path?
Go to transaction PFCG and provide the role based authorization.

Authorisation checks

hello frnds
I have a a document number and listbox on selection screen. There are 5 vales in listbox ( create, save, cancel, park, post), my program works according to the vale selected in listbox.
Now i have to add authorisation check in it, means if some user does not have the role to cancel/create it then it shuld give the message ' you are not authorised to cancel/create it' and for other values in listbox.
In other words i have to give authorisation according to roles.
Kindly suggest how can i do it???
regds

Hi,
The following actions are subject to authorization checks that are performed before the start of a program or table maintenance and which the SAP applications cannot avoid:
Starting SAP transactions (authorization object S_TCODE)
starting reports (authorization object S_PROGRAM)
Calling RFC function modules (authorization object S_RFC)
Table maintenance with generic tools (S_TABU_DIS)
The authorization objects S_TCODE, S_PROGRAM, S_RFC, and S_TABU_DIS are standard SAP provided.
data: wa_tstc type tstc.
parameters: p_tcode type tcode.
authority-check object 'Z_TCODE'
id 'ACTVT' field '03' " read access
id 'ZTCODE' field p_tcode. " actual value
if sy-subrc eq 0. " check authorization
* fetch record
select single *
from tstc
into wa_tstc
where tcode eq p_tcode.
write:/ wa_tstc-tcode,
wa_tstc-pgmna,
wa_tstc-dypno,
wa_tstc-menue,
wa_tstc-cinfo,
wa_tstc-arbgb.
else.
* bad authorization
write:/ 'Bad Authorization'.
endif.

Authorisation checks fails in FMRP_RFFMEP1AX

Hi,
I've created a role giving access to transaction FMRP_RFFMEP1AX with restrictions on possible values
for funds, budgetgroup, budgetposition.
The authorisation checks succeed for funds and budgetgroup but fail for budgetposition : the report output shows lines which it shouldn't. I'm not an ABAP expert, but could it possible to disable programmatically certain authorisation checks ? How/where can I check this out ?
Kind regards,
Erik

Hi Forhad,
I'm not sure if the error is related to the communication between the Java and the BW or if it's a problem with the authorization.
Are you using a customer exit or an authorization variable in your query/bookmark?
Check if by chance your query have an hirarchy assigned to a characteristic, then, check the user's authorization and check whether you have enough authorization for the hierarchy.
I'm unsure, but maybe note 916090 can help you.
I hope it helps.
Regards,
Daniel

Update infotype without authorisation check

Hi, I have a requirement to update an infotype without authorisation check. Please let me know if there is any function module I can use to do that.
Regards,
Lanwu

Hi,
What is the functional requirement?
Because basically it's the same as granting users extended authorization, but without the authorization to execute transaction pa## (except for pa20).
This way, you prevent users from changing their own data. But when they use a program with FM hr_infotype_operations, they pass the checks.
Kind regards, Rob Dielemans

Error in the ABAP Application Program

Dear All
While Incoming invoice posting ( MIRO). When i put amount in Unpl. Del. Csts field system give following Error
Error in the ABAP Application Program
The current ABAP program "SAPLMRMK" had to be terminated because it has
come across a statement that unfortunately cannot be executed.
Error analysis
    When changing or deleting one or more lines of the internal table
    "\FUNCTION-POOL=MR1M\DATA=YDRSEG[1]-CO" or when inserting in the table
     "\FUNCTION-POOL=MR1M\DATA=YDRSEG[1]-CO", 0 was used as
    the line index. An index less than or equal to zero is not
    allowed.
    The error can occur when using the following options:
    1. "INDEX idx" for specifying the line number in the table
     "\FUNCTION-POOL=MR1M\DATA=YDRSEG[1]-CO"
       where you want to change, insert or delete.
    2. "FROM idx" for specifying the start index when deleting a line
       area from or inserting a line area into the table
     "\FUNCTION-POOL=MR1M\DATA=YDRSEG[1]-CO".
    3. "TO idx" for specifying the end index when deleting a line
       area from or inserting a line area into the table
Pls help to resolve above issue
Regards,
Vipin

Hi,
have you checked transaction SM13?
if so, what information have you got there?
Best regards.
Edited by: Pablo Casamayor on Sep 30, 2011 3:33 PM

No active writeable datasource found for user creation, check your Persiste

HI SAP Guru's
Suddenly when I am login in Portal with J2EE_ADMIN or any user , I am getting error
You are not authorized to access this application; contact your system administrator
and when I am going to create user in identity management I am getting below error
Current user has user creation permissions in the UME, but cannot create users in the back-end system (data source). The original and possibly untranslated message was: "No active writeable datasource found for user creation, check your Persistence Configuration.".
I have searched all related treads in SDN but no success
Please help.
Thanks & Regards
Vinay Patel

Dear all,
I was searching the community because I had this same error and there was no answer of how it was fixed. So I'm sending how I fixed today in a customer environment.
1. Go to portal http://<portal>/webdynpro/dispatcher/sap.com/tcsecumewdumeadmin/UmeAdminApp
- select configuration
- folder "sap system based in abap"
- do the conection test
If the test fails, log on in client 001 and change user SAPJSF:
- assign role SAP_BC_JSF_COMMUNICATION (only this one) and one profile that has permission to RFC logon
- you can change the password too
STOP/START ABAP+JAVA
Go again to the portal above and test connection again. The tests should now be OK.
2. Go to portal http://<portal>/irj
- Log on with administrator user
Now you should be able to create an user.

ABAP QUERY PROGRAM OUTPUT SHOULD DISPLAY FROM SAP SCRIPT.

THIS IS MY URGENT REQUIREMENT ...
I DONT KNOW ABAP QUERY PROGRAM ..
PLEASE SUGGEST ME A WAY ON THIS ....
Functional requirements
Introduction
The wish of the customer is a printable customer overview. All desired fields will be shown in a new query called ZZADDRSS_CO. Double entries are taken for granted because of the data taken from the sales area and because of multiple contact persons. The customer accepts this. It should be made possible that the user creates and saves its own variant.
A second overview is needed, another ABAP will be developed for this requirement. This ABAP will show all the customer data and this list will have the possibility to be printed.
Solution
New Query ZZADDRESS_CO
The desired fields of attachment 1 need to be shown in the query.
The selection criteria are shown in attachment 2.
The column names of the additional data have to changed in the query.
Customer Overview.
Functional specification.
On behalf of this customer overview a standard SAP transaction will be used (transaction VC/2).This transaction will be extended.
The fields are shown on screen with the described headers. Printing of the overview will be done via SAP script. The script makes use of a fixed layout of the data.
The selection criteria are specified in attachment 2.
The layout of the customer overview and the SAP Script are specified in attachment 3.
Specification.
The next steps need to be performed.
1.     A routine per infoblock need to be created in Include RV77UNNN. In this routine the data is retrieved and written down to the screen and script,
Example LST1_901 . In include RV77SNNN you can find the standard infoblocks.
2.     Adapt via transaction SE16 table TFRM.
3.     Create a new view in the customizing (sales and distribution- Sales support-sales summary-Assign Reporting Views).Assign the new view to the infoblocks.(Example view 001 is assigned to block 901).
4.     In customizing it is not possible to assign the correct window and element to the infoblock .so this is done via SE16 in table T182A.
5.     Adapt script. Copy script SD-SALES-SUMMARY to a Z-SALES_SUMM.
Assign this new version to the new view in customizing. Create in the main window the element who writes the data on behalf of the print.
Attachment 1 Desired fields
Header: Address
~ Customer number                          KNA1-KUNNR
~ Title                                               KAN1-ANRED
~ Name1                                           ADRC-NAME1
~ Name2                        ADRC-NAME2
~ Name3                                           ADRC-NAME3
~ Name4                                           ADRC-NAME4
~ PO Box                                         ADRC-PO_BOX
~ PO Box POSTAL CODE             ADRC-POST_CODE2
~ PO Box city                                  ADRC-PO_BOX_LOC
~ Telephone no1                              ADR2-TEL_NUMBER   1ST RECORD
~ Telephone no2                              ADR2-TEL_NUMBER   2ND RECORD
~ Fax number1                                 ADR3-FAX_NUMBER 1ST RECORD
~ Fax number2                                ADR3-FAX_NUMBER 2ND RECORD
~ E-mail                                            ADR6-SMTP_ADDR
~ Search item                                   ADRC-SORT1
~ Notes                                            ADRT-REMARK
Header: control data
~ VAT registration number              KAN1-STCEG
Header: Payment transactions
~Bank country key                         KNBK-BANKS
~Bank key                                      KNBK-BANKL
~Bank Account number                 KNBK-BANKN
Header: Marketing
~ Industry key                                   KNA1-BRSCH
~ Industry code 1                              KNA1-BRAN1
~ Industry code 2                              KNA1-BRAN2
~ Industry code 3                                KNA1-BRAN3
~ Industry code 4                                KNA1-BRAN4
~ Industry code 5                               KNA1-BRAN5
~Annual sales, currency, year           KNA1-UMSA1, KNA1-UWAER, KNA1-UMAH
~ Yearly no of employees, year      KAN1-JMZAH, KNA1-JMJAH
~ Fiscal year variant                          KNA1-PERIV
~Legal status                                      KNA1-GFORM
Header: Correspondence
~ Our account number at customer            KNB1-EIKTO
Header: sales
~ Sales office                                              KNVV-VKBUR
~ Customer group                                       KNVV-KDGRP
~ ABC-classification                                  KNVV-KLABC
Header: Invoice
~Tax classification                          KNVI-TAXKD
~Terms of payment key                    KNVV-ZTERM
~
Header: Contact Persons
~Title                                   KNVK-ANRED
~Name                                   KNVK-NAME1
~Advertising material                         KNVK-NMAIL
~Martial Status                         KNVK-FAMST
~Notes                                   KNVK-PARAU
~Function                              KNVK-PAFKT
~Department                              KNVK-ABTNR
Header: Partnerroles
~Personnel Number                         KNVP-PERNR
~Name of employee                         PA0001-ENAME
Header: Additional Data
~Attribute 1                              KNA1-KATR1
~Creation date                              KNA1-ERDAT
~Attribute 2                              KNA1-KATR2
~Change date of field KNA1-KATR2          CDHDR-UDATE
~Attribute 3                              KNA1-KATR3
~Attribute 4                              KNA1-KATR4
~Attribute 5                              KNA1-KATR5
~Attribute 6                              KNA1-KATR6
Attachment 2 Selection fields
~Customer number
~Sales office
~Personnel Number
~Sales Organization (default NL01)
~Industry key
~Industry codes (1 till 5)
~ABC- classification
~Creation date
~Attribute 1
~Attribute 2
~Attribute 3
~Attribute 4
~Attribute 5
Attachment 3 Customer overview + SAP Script
Customer master data sheet: 11490                 Page1
Requested by karen Dunnewold                Date: 25.08.2004
Address
(Default SAP script ADDRESS statement)
Title
Name1
Street + number
PO Box city
Country
Search term: ADRC-SORT1
Telephone 1:      ADR2-TEL_NUMBER     2: ADR2-TEL_NUMBER
Fax 1:          ADR3-FAX_NUMBER     2: ADR3-FAX_NUMBER
E-mail:          ADR6-SMTP_ADDR
Notes:           ADRT-REMARK
PO BOX
ADRC-PO_BOX
ADRC-POST_CODE2 ADRC-PO_BOX_LOC
T005T-LANDX (T005T-LAND1 = ADRC-COUNTRY)
Control data
VAT registration number:     KNA1-STCEG
Payment transactions
Country: KNBK-BANKS Bank-key: KNBK u2013 BANKL Bank account: KNBK-BANKN
Marketing
Industry           KNA1-BRSCH     Industry Description
Industry code1          KNA1-BRAN1     Industry Description
Industry code2          KNA1-BRAN2     Industry Description
Industry code3          KNA1-BRAN3     Industry Description
Industry code4          KNA1-BRAN4     Industry Description
Industry code5          KNA1-BRAN5     Industry Description
Figures
Annual Sales          KNA1-UMSA1, KNA1-UWAER in KNA1-UMAH
Employees          KNA1-JMZAH                         in KNA1-JMJAH
Legal status           KNA1-GFORM description
Customer master data sheet 11490                         Page 2
Requested by karen Dunnewold                         Date: 25.08.2004
Contact Persons
KNVK-ANRED
Mailings: KNVK-NMAIL           Notes: KNVK-PARAU
KNVK-ANRED
Mailings: KNVK-NMAIL           Notes: KNVK-PARAU
Correspondence
Our account number at customer      KNB1-EIKTO
Sales
Sales office          KNVV-VKBUR     Description
Customer group     KNVV-KDGRP     Description
ABC-classify          KNVV-KLABC
Currency          KNVV-WAERS
Invoice
Terms of payment key KNVV-ZTERM      Tax classification KNV1-TAXKD
                              Description
Partner (Leave SAP default)
Partnerrole               Number          Name
KNVP-PARVW          KNVP-KUNNR     NAME1
KNVP-PARVW          KNVP-KUNNR     NAME1
Additional data
Attribute1          kna1-katr1     Description
Attribute2          kna1-katr2     Description
Attribute3          kna1-katr3     Description
Attribute4          kna1-katr4     Description
Attribute5          kna1-katr5     Description
Attribute6          kna1-katr6     Description

hi narayana
i think u need to write a driving program and a provided with a smatform u sit along with the SD consultant.
ur further views can be shared.
Rgs,
Venkat.

How to use the AUTHORITY-CHECK in ABAP

I am a security guy but am trying to understand how the AUTHORITY-CHECK works. I have read the help on it but it doesn't answer to my understanding. I want a check in a report so that no matter what the user selects the program goes out and checks the authorization in the users master record and only displays what he has access to. I am sure this is basic but I am not a programmer.
Thanks

Hi Greg,
Basically a AUTHORITY-CHECK is a programmatic way to check a auth object a user has. This is only as good as the person writing the code makes is.
Here is a basic example of how it could work. Lets say you have auth objects for users that limit them to see company code. User A can see cc 10, User B can see cc 20 and user C can see both.
In the code the programmer would have to first do the authcheck to see what CC the user has access to. Then they would have to limit his reporting based on the results of the authority check. So they might do it by saying SELECT * FROM XYZTAB WHERE COMPANY CODE = AUTHCC
This is what I think you are looking for. There are other ways to use the auth check. You can do a check and end the program with a message if they don't have authorization.
If you need more info, let me know
John

User authorisation check in ABAP-HR program

Similar Messages

Maybe you are looking for