Question:
Hi all,
I HAVE CREATED A CLASS USING SU21 AND I CREATED A OBJECT TO THE CLASS WITH FIELDS
1)ACTVT
2)WERKS
THEN I CREATED AROLE IN PFCG AND I GAE A PROFILE NAME THEN I CLICKED ON AUTHORIZATION , THEN I SELECTED , DO NOT SELECT TEMPLATES.
THEN I CLICKED MANUALLY AND ADDED THE OBJECT I CREATED , THEN I ADDED A PLANT TO A WERKS FIELD AND * (FULL AUTHORIZATION) TO ACTVT FIELD.
THEN I SAVED IT AND GENERATED IT.
THEN I WENT TO USER TAB AND I GAVE A USER ,SAVED , I DID COMPARE USING COMPLETE COMPARE AND COME BACK AND SAVED IT AGAIN AND JUST CAME OUT OF THE ROLE.
NOW I CALLED THE OBJECT IN ONE OF MY PROGRAM, WITH THE SAME PLANT AND ACTVT SAY 2.
IT WORKED FINE FOR MY LOGIN I.E SY-SUBRC EQ 0 , I EVEN WORKED FINE FOR OTHER LOGINS I.E IAM GETTING SY-SUBRC 12
I used personalization while creating a request for role.
let me know the reason for not working in QAS
MY THOUGHTS ARE
1) DOES THE PLANT AUTHORIZATION GIVEN BY SECURITY PEOPLEIS OVERWRITING MY OBJECT OR IS THERE SOME REASON .
BUT I WHEN I RELEASED IT THATS WHEN THE PROBLEM OCCURS.
IN QAS ,EVEN BEFORE ADDING USERS THE SY-SUBRC EQ 0.
in QAS , ALL USERS ARE GETTING AUTHORIZATION
thanks
Answer:
Working as designed...
Authorization objects are the key to the lock and the lock is the ABAP program statement AUTHORITY-CHECK...
If the code does not check for the authorization all the objects and restriction you place in a role and assign to a user means nothing.
_________________
John A. Jarboe