User Authority Check
---
About Authorty Common T-Code:
SU01:Assign profile=>就是创建用户然后分配权限的profile
SU02:Creating profile=>创建profile
SU03:Creating authorization=>创建权限
PFCG:Role Maintain=>角色的维护
SU21:List of object class=>在这里创建object class
SU22:List of transaction with check object=>把事务代码相关的check object找出来
SU24:Maintain assignment of authorization object of transaction=>根据事务代码找到相关的authority object.
SU25:我没有权限使用,就是复制系统标准的profile
SUIM:Display a generated authorization profile
SU53:Display authorization data for user=>列出用户的权限
SM59:Display and Maintain RFC Destinations => 远程登录
---
Authority Check Type List:
(1). Transcation Run Check.
Create T-Code, you can in [Authorization Object] Field there Input Authority Object and Set Value Field.If User
want run the corresponding T-Code, User must have the corresponding authority,else user run the T-Code ,system will show
message.
(2). Program Run Check.
In the ABAP Program Attributes,Input Authorization Groups Attribute, Authorization Group and S_Develop and
S_Program Authorization Object 's P_Group Field Correlation.Via Check the Field and User Master Record's Corresponding value
to decide user whether run this program.
(3). Inside Program Authorization Check.
If System Can not automatic control user run the program's Authorization, You may also use inside program check
authorization.
Check Like this:
Authority-Check Object 'Object_Name'
ID 'Field_Name1' Field F1
ID 'Field_Name2' Field F2
If you not want check some field,you can set:
ID 'Field_Name' Dummy
Step 1: Use T-Code:SU21 Crate a Atuhority Object Class
e.g: ZZW01
Step 2: Use T-Code: PFCG Or SU02->TO Profile Generator.
Authorizations -> Change Authorization Data ->Manually(At Menu Bar) ->Authorization Object ->ZZW01
Step 3: Codeing.
---Complete Program: ZZW_AUTHORITY_CHECK
*-----------------------------------------------------------------------
*
* Company ASAT Company Limited
*
* ProgrameName: ZZW_AUTHORITY_CHECK
*
* Author: Wei_Zhu
*
* Date: 06/01/2007
*
* Description: Study SAP In Programe How To Check Control User
* Authority.
*
*-----------------------------------------------------------------------
REPORT ZZW_AUTHORITY_CHECK .
Parameters: P_Carrid Type Sflight-Carrid.
Authority-Check Object 'ZZW01'
ID 'CARRID' Field P_CARRID
ID 'ACTVT' Field '999'.
if SY-SUBRC = 4.
Message e045(sabapdocu) with p_carrid.
elseif sy-subrc <> 0.
* message e045(sabapdocu) with 'Error!'.
message e045(sabapdocu) with sy-subrc.
endif.