BAPI authorization doubt

[marc_marco]

Hello,

I Run BAPI to update notification after the save of PM order
The user should have authorization to this code execution but not to tcode IW22

Is it possible from authorization perspective  ?

Thanks

Ziv

[Former Member]

Yes, infact it is mandatory.

Cheers,

Julius

[marc_marco]

Hi Julius,

Thanks for your reply ,

Just to conirm You mean that  the user will not have dialog IW22 authorization , yet he can run the BAPI that update the notification .

Regads,

Ziv

[Former Member]

Yep, the definition of a BAPI is that it must functionally perform the same processing as dialog functions and must be remote enabled, but is not allowed to check S_TCODE.

If the entry point for the user is the BAPI, then you should authorize S_RFC plus the application authorizations needed. S_TCODE is not needed even if functionally the same as IW22.

Cheers,

Julius

[marc_marco]

Thank you Julius

[Former Member]

BTW: what is the concern with IW22? It is a bit of an overkill to access CAD drawings and the SU24 proposals for changing the user status are very blunt, but other than that the transaction is harmless and one would be happy if people did their work.

I generally observe that customers do not care much about I* authorizations in PM.

Cheers,

Julius