cancel
Showing results for 
Search instead for 
Did you mean: 

authority check

Former Member
0 Kudos

hi,

what is the authority check.......

is there any diff b/w authority check and lock object?

thanks

kiran.

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi Kiran,

Auhtority check is to give authorization to the

specific users. to do that we need to create

authorization object assign it to particular user id

so that , they can access it.

And alos we can give different authorizations like

read/modify/insert.

Lock object is to lock the objects, if one person is

accesing the object and if other person also trying to

do some modfications,to overcome the situation we need

to lock and unlock the objects.

Thanks&Regards,

Siri.

Kindly award points if the answer is useful.

Answers (4)

Answers (4)

Former Member
0 Kudos

Hi Kiran,

Authority Check :

1. This is a check basically performed to determine if a particular user is authorized to perform the particular operation.

2. This check is necessary to control the user access. Due to this , only the authorized users will be able to either create entries, delete or insert into the database table.

3. To create authority check , you need to create Authority object .

Table Maintenance - > Modifications - > Auuthority object.

Lock Object :

1. this is basically to create a lock on a particular object to maintain consitency in the data. It is of 3 types : a. exclusive but not cumulative

b. shared lock

c. exclusive lock.

2. this is created using transaction SE11 .

So , there is a diff. between the authority check and lock object. The former is to check the authorization to determine the person is correct to do perform the operation whereas the later is to lock the object .

Regards,

Kunal.

Former Member
0 Kudos

hi Kiran

AUTHORITY-CHECK OBJECT used to check whether authorization is entered in the user master record of the current user.

It is used to restrict users from executing the code and allowing only users with the permissions to execute it.

Please check the SAP HELP on this.

AUTHORITY-CHECK checks for one object whether the user has an authorization for that.

Example :

authority-check object 'S_TCODE'

id 'TCD'

field 'SM35'.

if sy-subrc ne 0.

  • User does not have authority for transaction SM35!!!

endif.

Documentation:

Authority-Check

http://www.sapdevelopment.co.uk/security/authority/authhome.htm

Check demo programs

DEMO_AUTHORITY_CHECK

DEMO_SPECIAL_TECH_AUTH_CHECK

Lock object is to control editing the object for synchronization.

Regards,

Naveen

former_member181962
Active Contributor
0 Kudos

This is what sap docu says:

<b>AUTHORITY-CHECK checks for one object whether the user has an authorization that contains all values of f (see SAP authorization concept).

You must specify all authorizations for an object and a also a value for each ID (or DUMMY).

The system checks the values for the IDs by AND-ing them together, i.e. all values must be part of an authorization assigned to the user.

If a user has several authorizations for an object, the values are OR-ed together. This means that if the CHECK finds all the specified values in one authorization, the user can proceed. Only if none of the authorizations for a user contains all the required values is the user rejected.

If the return code value in SY-SUBRC is 0, the user has the required authorization and may continue.</b>

<b>

A lock object is a virtual link of several SAP tables which is used to synchronize simultaneous access by two users to the same set of data ( SAP lock concept).

Locks are requested and released in the programming of online transactions by calling certain function modules which are automatically generated from the definition of the lock objects. These lock objects must be explicitly created in the ABAP Dictionary.

To set locks, you must perform the following steps:

1. You must define a lock object in the ABAP Dictionary. The name of the lock object should begin with E.

2. The function modules for requesting and releasing locks which are created automatically when the lock object is activated must be linked to the programming of the relevant online transactions.</b>

Former Member
0 Kudos