su24

[Former Member]

in su24 when i click check indicator

under check idicator

we have

c and cm

what does this mean

[Former Member]

Hi Sagar,

The check indicators in the SU24 actually give the inputs necessary for the SAP system to interpret the AUTHORITY-CHECK.

CM = Authorization checks are performed (if coded in the program) AND the authorization object is added in PFCG when the tcode is added to the role menu.

C = Authorization checks are performed (if coded in the program) but the authorization object is NOT added in PFCG when the tcode is added to the role menu.

Thanks,

Saby..

[Former Member]

Hello

in se93 i have checked for su01 the program used is SAPMSUU0 .

how do i check what all are coded in the program .

under c there are many object selected in su24 . are these objects are checked in su01???

[Former Member]

Hi Sagar,

Go to SE38

Give the program name

Select the source code and display.

Within the source code, find Authority-check and in there u can chk the auth.objects and the field if any defined.

The objects that are maintained in SU24 as C will not be checked unless it has been hard coded in the program under Authority-check.

Thanks,

Saby..

[Former Member]

> The objects that are maintained in SU24 as C will not be checked unless it has been hard coded in the program under Authority-check.

Though there are a few exceptions to that rule as well, like:

- S_TCODE

- S_PROGRAM

- S_DATASET

- S_C_FUNCT

- etc.

You won't see them in the coding, but they are there.

Cheers,

Julius

[jurjen_heeck]

And what about the possible object linked to a transaction in SE93......

That one isn't in the code either.

Besides that, just searching in the source code will not automatically display all includes and function modules etc. The list of AUTHORITY-CHECK statements from the main program will hardly ever be complete.

Tracing the actual program while it runs will give you far better information.

[Former Member]

That's also true.

Another one is if the checks are in a function module which only makes these checks when the program actually runs and calls the function module.

Yet another, is that in some cases the authority-check statement is coded in a different program which is in a different system... those ones are hard to trace as well..

Cheers,

Julius

[Former Member]

Hi Sagar,

As you can imagine, this has been asked and answered several times before.

For stuff like this, please search the forum and help.sap.com and the F1 help (in the system itself) before opening a new thread.

This helps us keep the search functionality usefull

Cheers,

Julius

[Former Member]

This message was moderated.