Q
Problem solve Get help with specific problems with your technologies, process and projects.

How SAP user authorization tool works when a TCODE is executed

SAP uses a system program to check the authorization of users executing TCODE, explains expert Farooq Ali. What checks does the SAP authorization tool perform when a transaction code, or TCODE, is executed in order to ensure that the user is an authorized user?

What checks does the SAP authorization tool perform when a transaction code, or TCODE, is executed in order to...

ensure that the user is an authorized user?

When initiating a transaction, a system program performs a series of checks to ensure that the user is authorized.

 

  1. The program checks whether the transaction code exists in table TSTC.
  2. The program checks whether the transaction code is locked by the administrator (transaction code SM01).
  3. The program checks whether the user has the authority to start the transaction. Authorization object S_TCODE (transaction start) contains the authorization field TCD (transaction code). The user must have the appropriate authorization for the transaction code to be started (for example, FK01, Create Vendor).
  4. The program checks whether an authorization object is assigned to the transaction code. If this is the case, the program checks whether the user has an authorization for this authorization object. The transaction code/authorization object assignment is stored in table TSTCA.
  5. The system performs authorization checks in the ABAP program using the ABAP statement Authority-Check.

Note: An SAP program controls steps 1-4. It displays an automatic message to the user if an authorization attempt fails in the step.

This was last published in January 2007

Dig Deeper on SAP Basis administration and NetWeaver administration

PRO+

Content

Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.

-ADS BY GOOGLE

SearchManufacturingERP

SearchOracle

SearchDataManagement

SearchAWS

SearchBusinessAnalytics

SearchCRM

SearchContentManagement

SearchFinancialApplications

Close