10-30-2015 8:40 AM
Hello,
From Authorization perspective, there is possibilities to restrict access to tables and group of tables via S_TABU_NAM and S_TABU_DIS..
Is there a way to restrict access to a specific field in a table?
Thanks, Safa
10-30-2015 10:05 AM
Hi Safa Agrebi,
Please use authorization object S_TABU_LIN to restrict user access at line level.
This authorization object has three fields which help us to restrict user authorization at line level
ORGKRIT --- Organizational criterion for key-specific authorizations
ACTVT --- Activity
ORG_FIELD1 --1. Attribute for organizational criterion
10-30-2015 10:05 AM
Hi Safa Agrebi,
Please use authorization object S_TABU_LIN to restrict user access at line level.
This authorization object has three fields which help us to restrict user authorization at line level
ORGKRIT --- Organizational criterion for key-specific authorizations
ACTVT --- Activity
ORG_FIELD1 --1. Attribute for organizational criterion
10-30-2015 10:54 AM
Hi Kiran,
Thanks for your answer.
This authorization object allows to restrict access to some rows of a defined table, basing on the value of a defined field ( criterion)
Exp: user can only view entries having company code = X
But I need to display all the entries in a table, but I want to restrict the view of the whole column ( company code)
Any idea...
Thanks a lot in advance
Safa
10-30-2015 11:07 AM
Create a z-view (e.g. projection) for the particular table without column you want to hide. Create a z-transaction with parameters. In z-transaction name of screenfield 'VIEWNAME' = z-view.
Hope this will be helpful.
10-30-2015 11:24 AM
Hi Michael,
The table I am dealing with is already a View, and it is used by other program/transaction..
that is way I want to restrict the access from authorization area..
Thank you
Safa
10-30-2015 12:34 PM
Hi
In standard there is no common authorization check against table column.
It depends from program code.
You can create your own Z* to achieve this.
Another approach is to use some kind of gateway SAP<->DB.
Software which monitor DB commands from SAP and block restricted to some users actions.
I think Guardium for DB2 can do this.
Regards
Przemek
10-30-2015 12:55 PM
You can also think about using SHD0 Transaction/Screen Variants. Allows you to hide table columns.