Granting access to SA38

[Former Member]

I've created a role for transaction SA38 to give users.

When the users try accessing the trx they were getting a Program termination due to Authorization.

Upon running the SU53,I adjusted another role which was called in the Authorization check.

The users ran the program again and once again a Program termination occured.

This time the SU53 read

Object S_DATASET -Authorization for File Access

Object Class BC_A -Basis Administration

Activity 33

Physical file name (file path)

ABAP Program name (This is the name of the program the user is trying to run using SA38)

Can anyone advise where i can start checking for this activity 33? The authorization check did not call a Role.

Also note the role i created for the TRX SA38 ,i didn't specify an Authorization group under Basis- Development Environment (for the role).How do i do this?

[Former Member]

Hi Adeel,

Simply go to PFCG and edit the rol.

Add the authorization object SU53 tells you (S_DATASET?). Here you are going to set the activity 33.

SAP is asking you to specify what ABAP program the users are going to be able to run. If you dont want to specify names, but just to give access to whatever program just write * . (all programs).

I suggest you to create a user for testing and assignate the rol to this user so you can verify it for yourself before giving it to the users

Good luck,

[Former Member]

^^Thanks i did everything before (with the users)but i couldn't see where i needed to add that activity 33.When i went back to PFCG I clicked the Open tab AND was able to add the activity 33 manually.Somehow the Authorisation for file access needed to be entered manually.

I'm going to transport now (cross my fingers.).

[Former Member]

Take a look at the documentation on function module AUTHORITY_CHECK_DATASET. You should check the authority of the user <b>before</b> you perform the DATASET commands (with resultuing dump if no authority).

The intended solution to the authorization problem, would be to create a transaction for the program, and maintain transaction SU24 to pull in S_DATASET with the name of the program, the activity and the file name as required when you add that transaction to a role menu.

Kind regards,

Julius