Comments on: Authorization in SAP

By: heiner

heiner — Mon, 28 Mar 2005 04:06:23 +0000

In case a transaction will call function modules you also might have to check for all authorization checks that the function modules will call. – To find out simply which checks are performed by VA01 you might use the debugger and have breakpoints set at all command executions of command authority-check.

By: sapfaq14457

sapfaq14457 — Fri, 25 Mar 2005 03:47:44 +0000

Using Su24 is some clue, but based on my experience I can tell that SU24 is not always accure enough. Additional You should know that the same effect is if You add TC in PFCG during creation of role, while SU24 and PFCG transaction are based on the same data (table USOBT*).

By: tbear410

tbear410 — Thu, 24 Mar 2005 12:22:04 +0000

Transaction SU24 might be a help. You put in your transaction or a list of transaction and click execute. Select the transaction you’re interested in and click on “Display check indicator”. The next screen seems to be a list of all possible authorization objects that can be checked in the transaction. Select the first object and click on “Display field values”. I’m not a security expert but I have seen a tip about this and it appears to be what you’re looking for.