Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Auth grp for custom program

Former Member

‎04-20-2008 2:58 PM

0 Kudos

Hi,

I have an custom program which i need to secure by auth group so i went to RSCSAUTH then i kept some auth grp...eg;- say "FI" under auth grp column....before this i did not create any auth grp named: FI any where in the system......

so my question is by doing this is considered as creation and assignment of auth grp to this custom program ???

and if i do this in dev then how come this piece carried to production.

Thanks,

Lisa Pl

2 REPLIES 2

Former Member

‎04-20-2008 9:11 PM

0 Kudos

Hi,

I think I understand your request....

You don't have to create auth groups before assigning them to the program. The program auth group field allows any arbitrary 4 characters to be assigned which will then be passed into an authorisation check. When you transport the program, the custom auth group it taken with it.

Former Member

‎04-20-2008 9:54 PM

0 Kudos

The field is however not limited to 4 characters, RSCSAUTH is protected by 7.

As you would hopefully develop and assign Auth Groups to programs in your development system, it does not make sense (to me) that the defined Auth Groups of the concept are necesarily known to the Prod system, as the role(s) for the report / transaction should be created / changed from the same source, ideally. So transporting the Groups themselves is only usefull if you are, for example, protecting programs or queries or report trees in production which are also maintained there. Transporting the program itself with the assigned TRDIR-SECU entry is not hindered (unless there is some feature of the STMS which does this - for example the production system is the domain controller).

You can assign the auth group in Production as well with RSCSAUTH, subject to having the correct authorization for it. But you should restrict that very carefully and take care with your client settings...

Other similar topics are changing menus in production.

Cheers,

Julius

PS: If the reason for your question is because of protecting the prgram to run online, then perhaps a simple SY-BATCH... check in the program is another (additional) option. S_PROGRAM P_ACTION = 'BTCSUMBIT' as well.

Edited by: Julius Bussche on Apr 20, 2008 8:58 PM