User has to get a message as soon as he inputs Z_T_code of a Z_Dialog Prog.

Question

Hi Experts,
I hv a z_dialog prog. with z_tcode as its tx. code.
Say, if an UN-AUTHETICATED user enters its transaction code z_tcode, immediately, he has to get a message, saying that, he is not authorised as a text in a screen. I know, its authorisation object and its related code, like
CHECK AUTHORITY-OBJECT zzz
FIELD
ACTV
But, let me know, Where I hv to write it, is it in PBO?
thanq
Edited by: SAP ABAPer on Feb 23, 2009 5:09 PM

Answer 1

It is sometimes advisable for report type transactions and also for dialog transactions which can be called via menu options to place a call to function module AUTHORITY_CHECK_TCODE upfront in the code.
This prevents users from running the code from other transactions, unless they are authorized for the transaction which is being called (that's your one...) or your transaction trusts it (see tcode SE97).
But there are scalability limitations to creating many pairs of trusting objects...
The best solution is always to code the correct checks at the correct locations, and re-use the role concept for the users with the correct authority. That way, you don't need to worry too much about the entry point (transaction, etc) which the user has - they will always experience the same behaviour when using the code.
There are a few exceptions, but perhaps that is what your auditors intended to say?
Cheers,
Julius