line authorization for table maintenance with S_TABU_LIN authorization object

line authorization for table maintenance with S_TABU_LIN authorization object
5 (100%) 2 votes

As you may all know, authorization for maintenance of tables can be controlled by Authorization Group variable which can be edit while generating maintenance screen for the table. This assigned authorization group is checked by S_TABU_DIS. Unfortunately this type of authorization check only prevents/allows full table access. What if you want to prevent/allow line access for tables. This time you need some authorization breakdown according to a column in your table. After some research i have found that S_TABU_LIN can serve for this purpose.
Now let me show, how it works step by step.

  • First find SPRO‘s related branch

spro

  • Configure customization starting with creating an Organization Criteria which will be checked by authorization object

spro1

  • Define your criteria’s attribute, it could be maximum 8

spro2

  • Give your table and field that will be checked against your S_TABU_LIN authorization

spro3

  • Activate your organizational criteria

spro4

  • From PFCG add S_TABU_LIN authority object to related role and assign required fields like organization criterion activity(02-Change) and parameter(Werks).

pfcg

  • If you try it with an unauthorized user ,you will get ‘You have no maintenance authorization for this table key’ error.

maintenance

 

 

 

 

 

 

You may also like

  • mass change of SAP users’ passwords (0)
    Recently we need to change thousands of SAP users' passwords. Firstly we have checked for a standard way of doing this. If you want to do mass user operations, SU10 is the right way for […]
  • exclude SAP_ALL while doing authority check (0)
    Recently i have completed an ABAP program which is aimed to be used in development and test systems not in production system. But i wanted to authorize a small group of people to execute […]
  • table maintenance with time-sliced data (0)
    If you have ever seen, there are many tables with time-sliced data in SAP. As a general rule these tables consist of a beginning and an end date which one of them is defined as a primary […]