Authorisation to Specific Smartform in CRM

[richard_kettle]

CRM 7 (WEB UI).

Scenario - a user needs to see all smartforms except one which is confidential.

Ive not been able to remove the ability via authorisation roles (PFCG).

The nearest thing that I have found is to remove the authorisation to the bitmap graphic on the smartform, but by removing this...

AUTH OBJ = S_BDS_DS

ACTIVITY = DISPLAY

CLASSNAME = DEVC_STXD_BITMAP

CLASSTYPE = OT

u2026the user would not be able to see all the other smartforms that have a bitmap.

Anybody got experience on limiting access to individual smartforms in CRM?

[Former Member]

Hi Richard,

I asked a CRM colleague if they were aware of how to implement this kind of restriction, their response is below, hope this helps.

"When a smartform is opened by a user, a function module is called (can't remember the name of the FM)

If a custom authority check is added to this FM, then a role can be created with access to a custom authorisation object which includes smartform name. Authorisation check would fail if the custom object is not available for the user"

I hope that helps somewhat,

Tom.

[mvoros]

Just to add more info. Every smartform is converted into function module that is later called from print program. Basically, you have two options: one is to modify print program and add additional authorization check before calling this FM. Another one is to use initialization routine in smartform to perform authorization check. Don't modify generated FM directly because the name may change. The printing programs use SSF_FUNCTION_MODULE_NAME to get form name.

Cheers

[richard_kettle]

I'm progressing well with this, thanks for inputs, but still need a bit of help.

I've put the auth object check into the initialization part of the smartform. I can trap the error, however all I get is an "error in smartform" message displayed.

Does anyone know how I can issue my own error message (such as "missing authorization") ?

The "error in smartform" message seems to be a general error message.

Thanks.