help need with auth object M_EINF_WRK

[Former Member]

Hi,

I want to know whether M_EINF_WRK IS TO CHECK WHETHER THE USER HAS A CCESS TO A PARTICULAR PLANT.

I found this from f1 help

say if i don't have the access to a particular plant, how can i add it.

i know it can be done by using roles but i don't know to what role this auth object is attached to o

lets we have four plants say p1,p2,p3,p4

i need access to p1 and p2 only and iam using this auth object in the code and where should i go inorder to get acess for p1 and p2.

Thanks

kajol

[Former Member]

Hi Kajol,

You can use Tcode SUIM to find out the roles based on transaction with value.

you can use same transaction to find the authorization object based on value.

Regards

Ben

[Former Member]

Hi,

To Identify who is having access to particular object you can use T-Code SUIM

You will be displayed with multiple options

In the roles Tab

-> By authorization values (click on clock icon)

In the next screen enter the object M_EINF_WRK click on Enter values

Fill with the plant value which you want to search.

Clik on clock icon or (F8) to execute

You will be displyed with list of roles which has object and plant value which you have entered.

Then choose any role and click on User assignemnt.

You will be displayed with list of users who are assigned to role.

To add plant to a particular role

You can use T-Code PFCG Enter the role in which you want to add the plant (edit) or pencil icon)

Click on the authorization tab

You will have at the bottom two buttons (click on) Change authorization data

Change Authorization Data

Expert Mode for Profile Generation

In the next screen you will be displayed with list of objects

Click on the button orginasational level or (Ctrl F8)

You will be prompted with orginasationl values

Add as per your requirements

save and generate

(If you need any more information on derived roles let me know)

Cheers

Soma

In the orginazation levsl

[Former Member]

Hi ,

soma pradeep .Thanks for your time and reply

i couldnot locate this

Change Authorization Data

Expert Mode for Profile Generation

if you could your email id i would be great so if in case i can forward you snap shots

if you have any good document pls do forward it to

kajolsindi@yahoo.com

WAITING FOR YOUR REPLY

thanks

kajol

[Former Member]

Hi Kajol,

When you enter the role name and click on the change icon pencil.

You will be shown with a screen with following tabs

Description Menu Authorization user.....

Click on Authroization tab

In the next screen then you will find the two bottons at bottm of screen

Maintain Authoirzation Data and Generate Profiles

Change Authorization Data (Pencil icon)

Try now if you still dont get it let me know

You can have email ID pradeepk@intelligroup.com

Cheers

Soma

Message was edited by:

soma pradeep

[Former Member]

Hi pradeep and all,

I have one more uestion i did as you mention in your post.

I got bunch of roles .

i 'm interested in only of one out of all those.

when i use the auth object 'M_EINF_WRK' , the system automatically check for which role.

say i have auth in one role and i don't have auth for another role

so when i use this auth object code it would check against sy-uname right

would it give asy-subrc eq 0 because i have auth for one role or it would give a sy-subrc other than zero.

iam lettle bit confued

thanks

[Former Member]

Hi any thoughts on this

thanks

[Former Member]

Hi,

Based on roles and authorization concept

Users are assigned to roles

Roles contain authorizations

Authorizations are defined for authorization objects

The system checks authorization objects against the authorizations of the user

Cheers

Soma