Question:
I am an ABAP developer with no BASIS experience. I have a question regarding Area menu authorizations.
Everytime we create a custom report, we have to assign that transaction to a role. We are working on 4.7. Now we want to add reports to the custom area menu and then i am linking that custom area menu to SAP menu.
Is there any way that we assign the roles at area menu sub node level ? and not have to worry about authorizations for every new transaction.
Whenever a new transaction is introduced , it will be attached tto one of the sub nodes of the area menu . and the users authorized for that sub node are able to run it.
Thanks
Answer:
Is there any way that we assign the roles at area menu sub node level ? and not have to worry about authorizations for every new transaction.
Whenever a new transaction is introduced , it will be attached tto one of the sub nodes of the area menu . and the users authorized for that sub node are able to run it. No. Sap security does not work this way. The Role menu is supose to eliminate the need for the area menu. Roles are stagnant and not dynamic as you want. The role maintianer can always delete the copy of the area menu in the role and re-request it getting the new tcode.
Answer:
Thank you John for replying. I am using area menus as a replacement to the report trees. so they can have all the reports at one place.
At my last project, I created a report and transported it to production. It was 4.5B. Nobody was able to run it b/c of the lack of the authorization for the tcode. Instead of using the transaction , they just added that report to the report tree in poduction. Everybody was able to run it.
I don't know how I can do it here in 4.7 . Can you give me some suggestion or should i go to an ABAP forum for that ?
Answer:
No you cannot . Report trees are gone replace with area menus and following SAP basis for security you should be specifically allowing user to use something not prevent users from running. The problem with report trees was everyone though they were contolling the reports but they were not and with an area menu you must have a tcode so the base start/stop access is checked by default...
Working as designed and it should,
Answer:
That means, we will use area menus to place the Transaction codes for the reports. And the users still needs to have the authorization of every transaction that is added to the area menu.
Answer:
Precisley, just as it should be.