Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Protecting Tables and Programs

Former Member

‎05-16-2007 10:12 PM

0 Kudos

Why and How we will protect Table and Programs in R/3

Appreciated IF and Elaborate and Conceptual Explanation is Given

Thx & Best Regds

Neelima !!!

2 REPLIES 2

Former Member

‎05-17-2007 7:13 AM

0 Kudos

Hi Neelima,

Restricting tables and reports are considered to be very critical. Please have a look at the following which might throw some light on how to proceed with restricting the same:

Give access to transactions:

SA38 for Report programs

SM30 for Tables.

The 2 main objects cheked mainly are:

S_DEVELOP

S_TABU_DIS, respectively.

S_DEVELOP:

This contains the following fields:

Development class for transport system: Development class for which a user is authorized.

Development object ID: Object types for which a user is authorized.

Node name: Name of the programs or other types of objects, for which the user has authorization (also generic).

Authorization group with ABAP programs: Valid authorization groups for ABAP programs and associated objects. If you are not using your own authorization groups, you should set this field to the value *.

Activity: Operations that a user can perform.

S_TABU_DIS:

The object contains the following fields:

Authorization group for DD objects: Authorization for tables by authorization class according to table TDDAT.

Enter the name of the allowed classes. Table classes are defined in table TDDAT.

Activity: Allowed operations.

Hope it helps.

Please award points if it is useful.

Thanks & Regards,

santosh

Former Member

‎05-17-2007 9:25 AM

0 Kudos

Hi,

As santhosh said we can restrict the programs using S_develop authorization obejct and can restrict the entire table using S_TABU_DIS. Further going down we can restrict the tables based on the key fields of the table using the authorization object S_TABU_LIN. Suppose if you are doing coustomization for different countries and want to restrict those countires to see only there data in the table, you can do that by restricting the table based on there country code or currency. For implimentation of S_TABU_LIN authorization object please go through the below link

http://www.mortenhjorthnielsen.dk/Security/S_TABU_LIN.htm

Cheers,

Bharath.