Question:
hi
i have a requirement such that there are 2 roles , A and B if i use role A i get what i need and if use Role B it does not work for the requirement , so i need to find out which object that is different in these 2 roles is causing problem, so i did a compare between these 2 roles , but i get 80+ objects that are different , now should i try each and every object thats different and try the requirement for the test user everytime to trace the problem or is there any other method
Answer:
When you use Role B did you do an SU53 to check for the auth failure?
Have you run a trace (ST01) of the successful action and compared it to a trace of the failed one?
_________________
Sandi
~~~~
Apparently Father Christmas, the Easter Bunny, the Tooth Fairy and Star Wars aren't real
Tuly kiwi.
Answer:
tcode S_BCE_68001777 = report RSUSR050 : Compare role 1 : role 2
Tarr
Answer:
this problem is that a button is missing or not displayed if we dont have authorization for that object , so Su53 report does not show any data nor ST01
Answer:
You will then need to compare the roles object by object or look at the user Parameters in SU01 to see if they are different.
In a few rare SAP programs SAP does not use the ABAP authority-check statement so there is no SU53. SAP uses either the simulate authority check function module or another set of convoluted logic to check the user's access. Ou may have to resore to trial and error or debug the code.
Answer:
this problem is that a button is missing or not displayed if we dont have authorization for that object , so Su53 report does not show any data nor ST01
It cannot be excluded in SAPs auth concept that one need to grant auths to prevent access...
iF THE (shit) program is deternmining whether the button is displayed by checking auth, then this would normally appear in St01.
If not, then read and debug the code as suggested and watch for a c-call. You can check the auth checks in the call with a function module which is documented in SU21 for object S_C_FUNCT.
Babs