08-11-2008 8:21 PM
what happens if an object (filed names) are not maitained in SU24 and maintained in PFCG ( i mean filed names)
Thanks,
08-11-2008 8:50 PM
For this case, if you don't maintain the Field values of an authorization object in SU24 and maintain them directly in role, then every time you have to update the fields which may be global.
Like in a Z transaction code, you add S_PROGRAM and you know that it would require auth group field as ZABC, then it is better to maintain the field values of S_PROGRAM in SU24 of the tcode itself, to avoid
- maintaining it every time you add this tcode to a role
- someone may forget to maintain required field values.
So, it is good practice to maintain SU24 values in such cases.
Regards,
Zaheer
08-11-2008 8:50 PM
For this case, if you don't maintain the Field values of an authorization object in SU24 and maintain them directly in role, then every time you have to update the fields which may be global.
Like in a Z transaction code, you add S_PROGRAM and you know that it would require auth group field as ZABC, then it is better to maintain the field values of S_PROGRAM in SU24 of the tcode itself, to avoid
- maintaining it every time you add this tcode to a role
- someone may forget to maintain required field values.
So, it is good practice to maintain SU24 values in such cases.
Regards,
Zaheer
08-11-2008 8:56 PM
Do you mean "field values" or "file name" field?
If I remember correctly, the file name field is infact the path.
But Zaheer's answer is mine as well.
Cheers,
Julius
08-11-2008 9:04 PM
my bad ...
field value = Field's value... i forgot that there is field with text FIELD also in SU24 😛
Thanks Julius for the support
08-11-2008 9:18 PM
Take a look at function module AUTHORITY_CHECK_DATASET to see how you can hook the path (object S_PATH) if you want to.
It makes sense to check the authority before you open or what-ever-you want-to-do-to the file anyway. Those "file" authority-checks are in the kernel as well (invoked by certain ABAP statements such as DATASET), so they will be performed anyway, even if you don't check them in the code.
Even more reason to maintain them in SU24 once-and-for-all use of that context....
Cheers,
Julius