Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

How to prevent user from accessing a a specific field in a table?

Former Member
0 Kudos

Hello,

From Authorization perspective, there is possibilities to restrict access to tables and group of tables via S_TABU_NAM and S_TABU_DIS..

Is there a way to restrict access to a specific field in a table?

Thanks, Safa

1 ACCEPTED SOLUTION

Former Member
0 Kudos

Hi Safa Agrebi,

Please use authorization object S_TABU_LIN to restrict user access at line level.

This authorization object has three fields which help us to restrict user authorization at line level

ORGKRIT --- Organizational criterion for key-specific authorizations

ACTVT  ---  Activity

ORG_FIELD1 --1. Attribute for organizational criterion

6 REPLIES 6

Former Member
0 Kudos

Hi Safa Agrebi,

Please use authorization object S_TABU_LIN to restrict user access at line level.

This authorization object has three fields which help us to restrict user authorization at line level

ORGKRIT --- Organizational criterion for key-specific authorizations

ACTVT  ---  Activity

ORG_FIELD1 --1. Attribute for organizational criterion

0 Kudos

Hi Kiran,

Thanks for your answer.

This authorization object allows to restrict access to some rows of a defined table, basing on the value of a defined field ( criterion)

Exp: user can only view entries having company code = X

But I need to display all the entries in a table, but I want to restrict the view of the whole column ( company code)

Any idea...

Thanks a lot in advance

Safa

michael_kozlowski
Active Contributor
0 Kudos

Create a z-view (e.g. projection) for the particular table without column you want to hide. Create a z-transaction with parameters. In z-transaction name of screenfield 'VIEWNAME' = z-view.

Hope this will be helpful.

0 Kudos

Hi Michael,

The table I am dealing with is already a View, and it is used by other program/transaction..

that is way I want to restrict the access from authorization area..

Thank you

Safa

0 Kudos

Hi

In standard there is no common authorization check against table column.

It depends from program code.

You can create your own Z* to achieve this.

Another approach is to use some kind of gateway SAP<->DB.

Software which monitor DB commands from SAP and block restricted to some users actions.

I think Guardium for DB2 can do this.

Regards

Przemek

0 Kudos

You can also think about using SHD0 Transaction/Screen Variants. Allows you to hide table columns.