Scribd
Upload
162 views

Authorization Objects

The document describes several ABAP authorization objects: S_develop authorizes access to all ABAP Workbench components like the ABAP Debugger and Screen Painter. S_program authorizes executing ABAP programs by group. S_dataset authorizes accessing files from programs. S_tabu_dis authorizes displaying and maintaining tables. S_tcode checks transaction authorizations. S_transprt is required to use the Transport Organizer and Customizing. S_btch_job authorizes background job operations. And S_btch_adm authorizes super users to manage all background jobs in a system. Each object defines fields to specify authorized groups, activities, and other details.

Uploaded by

baithibabu
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOC, PDF, TXT or read online on Scribd
162 views

Authorization Objects

The document describes several ABAP authorization objects: S_develop authorizes access to all ABAP Workbench components like the ABAP Debugger and Screen Painter. S_program authorizes executing ABAP programs by group. S_dataset authorizes accessing files from programs. S_tabu_dis authorizes displaying and maintaining tables. S_tcode checks transaction authorizations. S_transprt is required to use the Transport Organizer and Customizing. S_btch_job authorizes background job operations. And S_btch_adm authorizes super users to manage all background jobs in a system. Each object defines fields to specify authorized groups, activities, and other details.

Uploaded by

baithibabu
Copyright
© Attribution Non-Commercial (BY-NC)
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOC, PDF, TXT or read online on Scribd
You are on page 1/ 5

S_develop

Definition

General authorization object for ABAP Workbench objects. You use this object
to grant access authorizations for all workbench components.

components:

• ABAP Development Tools


• ABAP Debugger
• ABAP Dictionary and Data Modeler
• Screen Painter and Menu Painter
• Function Library
• SAP Smart Forms

Associated Objects:

• Transport Organizer (S_TRANSPRT)


To use the Workbench, users must also have authorization for this.
• ABAP: Programm Flow Checks (S_PROGRAM)
TO execute programs, users must also have authorization for this.

Defined fields

 DEVCLASS -----------Package
It is used for transport system.
 OBJTYPE ----------Object type
For which user is authorized, you can display list of values
 OBJNAME(NODENAME) ----------Object name
Name of the program,other types of object.
 ACTVT --------------Activity
Operations that user can perform.

S_program
Definition

Authorization to execute ABAP programs by program group. You can assign


authorizations by program group for the following activities:

• Starting a program
• Scheduling a program to run as a background job
• Maintaining variants

1
Defined fields

 P_GROUP Authorization group ABAP/4 program


It means authorization group for ABAP program
 P_ACTION User action ABAP/4 program
User actions it have 3 actions
1)SUBMIT----start the program
2)BTCSUBMIT-----------schedule the program to run
background job
3)VARIANT----------------maintain variants

S_dataset
Definition: Authorizations for accessing files from ABAP/4 programs.

You use this object to assign authorizations for accessing operating system
files (with the ABAP/4 key word OPEN DATASET, READ DATASET,
TRANSFER and DELETE). This key word can also be used to assign the
authorization for using operating system commands as a file filter.

In ABAP/4 programs, you perform the authorization check with the function
module AUTHORITY_CHECK_DATASET.

Defined fields

PROGRAM ABAP Program Name


ACTVT Activity
FILENAME Physical file name

S_tabu_dis:
Definition: Authorizations for displaying or maintaining tables. The object
only controls access using the standard table maintenance tool
(transaction SM31), enhanced table maintenance (SM30) or the Data
Browser, including access in Customizing.

Defined fields

DICBERCLS Authorization Group


ACTVT Activity

Authorization for tables grouped by authorization class according to


table TDDAT.

2
Enter the name of the allowed classes. Table classes are defined in
table TBRG.

S_tcode:
Definition

Whenever a transaction is started, the kernel uses the transaction code as


the value to check against the authorization object. This check always
takes place (from Rel. 3.0E) and cannot be deactivated by the
developer.

Defined fields

TCD: Transaction code

S_transprt:
Definition

Authorization object for the Transport Organizer

An authorization for this object is required to use the following SAP System
components:

• ABAP Workbench
• Customizing
• Transport Organizer

Developers and Customizing developers should generally have an


authorization for this object. The display authorization is usually sufficient for
administrators. Administration functions in the Change and Transport System
area are checked using the separate authorization object S_CTS_ADMI.

Defined fields

TTYPE Request type (Change & Transport System)


ACTVT Activity

3
S_btch_job:
Definition:

You use this object to assign users authorizations for all operations except
scheduling. For example, you could assign users authorization to
delete their own jobs.

This object is used to check all critical administration operations for


background processing ( Tools -> Administration -> Jobs -> Job
overview.

Users do not need an authorization for this object to schedule background


jobs; an authorization is normally not required for end users.Exception:
If background jobs are to be automatically released after scheduling,
your users should have the authorization for value RELE so that the
scheduled jobs are automatically released.

An authorization for this object means users have authorization for their own
jobs in their current client. To assign a user administration
authorization for all users and all clients, use authorization
Background Processing: Background Administrator.

Defined fields

JOBACTION Job operations


JOBGROUP Summary of jobs for a group

S_btch_adm
Definition

S_BTCH_ADM authorizes a super user to manage


background processing (menu path Tools -> Administration ->
Jobs -> Job overview).

An administrator with this authorization can:

• Access background jobs in all clients of an SAP system. In the


overview, the system displays all background jobs throughout the
system.
• Without this authorization, users can only work on background jobs in
the clients in which they are logged on.
• Perform all functions on background jobs.
• Execute programs in job steps.

4
Defined fields:
ID for background administrator: Enter Y to grant the above
authorizations to an administrator.
Value N or missing authorization: The user is not authorized as a
background processing administrator.

BTCADMIN Background administrator ID

You might also like