Skip to Content
avatar image
Former Member

USOBT table - how SAP Interprets it in the code ?

Hello Experts,

When SAP populates USOBT table, there are certain authorization objects that are in No check. I am interested to know how does SAP understands not to do authority-check for these even though the authority-check for these objects are in the code. Also when we change it to check or check/maintain it starts cheking it.

Example - For t-code VKM1 - authorization object V_VBAK_AAT is in No-check so when you release a SD document using VKM1 and run a trace on this user id - you will find in trace that for V_VBAK_AAT, return code is 0. Understandable as the auth object is in No-check, SAP probably ignores it but once it is changed to Check or Check/maintain it starts checking for it. I would like to know how does SAP do that.

Reason for all this is because we created a custom t-code ZSD_VKM1 which uses the same program as VKM1 but when you release the document and try to save it using this custom t-code it gives the error message - " No maintenance authorization for the order type XXX" . But VKM1 does not. I tried to put V_VBAK_AAT as No Check in SU24 for this custom t-code but it does not help.

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • Best Answer
    avatar image
    Former Member
    Sep 24, 2010 at 04:04 PM

    > I tried to put V_VBAK_AAT as No Check in SU24 for this custom t-code but it does not help.

    It should so this is strange.

    About the workings, first of all concentrate on the customer table USOBT_C. That's the one you manipulate with SU24.

    The AUTHORITY_CHECK statements checks this table for entries corresponding the obejct to be checked for the transaction used. So the checks can behave differently for the same coding triggered through different transactions. Checks that are switched off through SU24 should indeed show up in the trace with return code 0.

    After you tried to switch off the V_VBAK_AAT check for your custom transaction, what does the trace show?

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Yes, it does make a difference if for one tcode there is a "no check" and for another there is not.

      Is the check from the trace performed in FM authority_check_tcode and is sy-tcode changing in the Z tcode?

      If that is the case, you should revert back to the same in SE97.

      Cheers,

      Julius

  • avatar image
    Former Member
    Dec 30, 2010 at 02:55 AM

    Looks like Developers did not create the custom t-code in a proper way. That is what SAP had to say.

    Add comment
    10|10000 characters needed characters exceeded