CG3Y - Directory specific authoirsation

[Former Member]

Hello,

Certain users need to download files from CG3Y, but I would like this restricted to the actual directory, currently they have access to all.

Can this be achieved?

If the directory is called /example, will setting object S_DATASET and field name FILENAME to /example achieve this?

Or is there a better way.

Thanks,

Jake.

[Former Member]

Take a read through function module AUTHORITY_CHECK_DATASET.

One option is the path hook.

Another option is to use transaction FILE.

Cheers,

Julius

[Former Member]

Thanks.

Can I use S_PATH in this scenario?

[Former Member]

The problem with CG3Y (and CG3Z..) is that you cannot use the program name, as it is all the same program without restriction to it's capability.

So yes, you should use S_PATH if you want to "hook it" and validate the entry.

If you are on a relatively recent patch level there is a validation of the file name which includes the path as a "logical file name" --> transaction FILE. See SAP Note 14970003, which is actually more of a book than a note...

Cheers,

Julius