Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Secure by Business area in SD documents

Former Member

‎06-28-2013 5:29 PM

0 Kudos

Hello,

We are using in FI, Business area, and now we are required to secure some SD transaction by Business Area : VF01, VF02, VF04, VFX3, VF06, VF11.

I have seen that maybe it's possible top populate GSBER field in VBRK and VBAK tables.

But I have found nothing else than specific development to code authority-check controls.

Does anyone did implement such requirement and how. Is there a standard solution or only custom ?

Thanks for your support

Philippe

1 REPLY 1

Former Member

‎07-08-2013 9:12 PM

0 Kudos

The question is whether the underlying code relating to these transactions includes an authority-check statement against GSBER. You could start by checking SU24 for each individual transaction to see if there is a SAP delivered or customer-updated relationship between the tcodes and an authorization object containig the GSBER field. This method could take some time and is not fool-proof as the relationships spelled out in SU24 are not necessarily indicative of the authorization checks made. The more expedient approach would be to run a ST01 authorization trace against the execution of these transactions and review the log for a check against GSBER. If you do not find an authorization check, a custom solution is in your future.