How to modify authorization check for tcode pa30

[Former Member]

Hi all,

To execute pa30 tcode the auth object p_orgin is required.

The auth object p_orgin contains the following fields:

AUTHC Authorization level

INFTY Infotype

PERSA Personnel Area

PERSG Employee Group

PERSK Employee Subgroup

SUBTY Subtype

VDSK1 Organizational Key

Our requirement is to add another field to the above object ie P_ORGIN

BTRTL Personnel Subarea, so that the restriction can be imposed on sub area basis without writing an additional z report or adding a z table.

I have added the same to P_ORGIN via su24 but the it is not working.

Pl guide if it is possible to do so and how.

Thanks in advance.

Regards

[Former Member]

Hi Manas,

I dont think the check wont work unless you change the code. Without applying logic through code how do you expect this to work ?You need to change the authority check for P_ORIGIN and introduce the check for the new field.

Regards.

Ruchit.

[Former Member]

Hi Ruchit,

Actually i was apprehending the same but wanted clarification for a possible soln.

Can it not be possible that the related report gets updated on such modification on execution of some report/process etc?

Thanks for your response.

[Former Member]

Hi Manas,

Not possible as of now though it is an intutive idea from your side )

This is because when introducing authority check using function modules Authority_Check a lot of times you would also give the value that should be present in user profile in order to validate the check .Now I dont think even with present levels of AI it is possible to do that because no system will be able to dynamically guage what exactly is in the mind of the user.

And additionally P_ORIGIN will be actually used in several reports where requirements will be different!!

Regards.

Ruchit.

[Former Member]

You could create a new authorization object with your required fields and add the object to the tcode (pa30) through se93.

[Former Member]

Hi ,

Thanks for your reply.

But it didnt solve my purpose.

Regards

[Former Member]

You created new authorization object in su21 with your required fields and assigned that new object to PA30 in SE93 under the authorization object field? That should of forced the user to have s_tcode as well as your new authorization object.