Question:
HI sapfan
I wanted to run authorisation trace, ST01, on a batch
user (user2) and expected to see auth check
on s_program but did not see it.
USER1 is assigned to a profile with sm36 and S_BTCH_NAME with
value of USER2 . USER1 uses USER2 to run job steps on ABAP program
with variant.
I have given ( for testing only) USER2 profile of SAP_ALL.
The trace on USER1 was as expected (S_BTCH_NAME with value of
USER2) and S_BTCH_JOB.
The trace on USER2 did not show check against S_PROGRAM as
I thought it should. WHY???????????????????
when I run the program with SA38 after setting the trace with ST01,
I see the program has been checked against S_PROGRAM. This
proofs the program should be checked when running under ID
USER2.
THANKS
GUEST999
Answer:
Working as designed. The Batch processor does not issue the equivalent "submit" command as SE38 or SA38 so no S_PROGRAM is not checked and does not run RSBRUNT which has the authority check in it. If I recall the S_PROGRAM is checked at the time of the job creation to see if both Ids are authorized to run the program.