Skip to Content

ABAP queries program group authorization

Dear experts.

In our project, we have restricted few infosets(SQ02) with the program authorization group. So for a user to execute the query associated with that infoset, he needs access to S_PROGRAM.

Now, I need to find all the program authorization groups associated with infosets to maintain in the roles. Could you please let me know if we have any way to get this data.

Thanks in advance,

Best regards,

Trilok K

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • Jan 19, 2016 at 09:03 PM

    Although I'm not an expert (apologies for not fitting the desired respondent demographics here), I went to Google.com and typed in "how to find a report by authorization group site:sap.com". There were quite a few posts found with very interesting information. Only checked the top 10 posts, didn't even have to look at 9000+ others.

    Did you search on Google before posting the question and did you not find any of that information helpful?

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Trilok kola

      I can guarantee you that the information is there in google, but you will be much faster via F1 key and even faster by provoking the check to write a record into ST01 trace to be able to follow it back to it's variable and then the location of the value -> the table.

      I don't want to be unsporting, so have a shot at it and lets see if there is a faster route than 3 seconds to get the information.

      For example... as of 7.41 you can choose the where-used-list type in SU21 on the object. Go for ABAP references. You will find a central location where it is checked in some form routines. Choose the one with the name which sounds like a winner and the table is there. Depending on how well your system's indexes are tuned, you might get there in under 3 seconds.

      Cheers,

      Julius

  • avatar image
    Former Member
    Jan 19, 2016 at 08:37 PM

    Did you already try to hit F1 on the field and follow the object navigator back to the tables behind it?

    I suspect that it might have documentation on help.sap.com as well, although I never tried in this case. Not knowing what you have tried so far, I have not looked.

    Assigning the infosets to authorization groups is a bit exotic - most use query groups and parameter transactions. Assigning them to logical databases with application objects checked is also less blunt -> more granular -> less queries and copies of them -> normally sufficient. And that only if users are using queries at all.

    Cheers,

    Julius

    Add comment
    10|10000 characters needed characters exceeded