Question:
Hi Guys,
I'm creating a new transaction in SE93, I'm just wondering if I can add a authorization check to restrict access for some users?
Thanks in advance!
Answer:
You most certainly can... The authorisation check you put here is checked when a user tries to start the transaction, so you probably do not want to check on org levels, just an activity, leaving the org level field to <dummy>.
Answer:
THe authorization object you can add in SE93 is redundant and of little use. It WAS the S_TCODE of its day before S_TCODE existed. you will want to add the AUTHORITY-CHECK tto your code and respond to the return code
Answer:
hi
i want to add an auth obj crm_ord_po to the standard t-code bbppo01 . i want to restrict the purchase order display to users based on purchase organisations . how can i do that . thanks .
- pras
Answer:
Step one:
Determine the risk ( loss to the company) and the potential for its occurance. THe results Should be low risk and low potential in which case the cost to control is NOT commensurate with the exposure.
Step two:
Concentrate on more added value security tasks.
Your other options if cost is no object for controls is to look for a user exit usong SMOD of BF03 and add the check if it is structured to accommodate an authorization check. or Copy the code and add "rewrite it to add the acces check" not recommended as newer version of SAP may require a rewrite, or just change the SAP code, Also not recommended.