Reducing Authorization Checks in Transactions

 

You can display the authorization objects associated with each transaction. You can also exclude any of these authorization objects individually from the authorization check. You should have a thorough knowledge of this application and its context before you start.

Proceed as follows:

1. From the initial screen of Transaction SU24, choose Maintain check indicators for transaction codes.
2. Enter either a single transaction code (for example, SE01) or an interval for a range of codes (for example, SE10 to SE38).

   The system displays either a single transaction or a list of transactions. See the note below regarding parameter transactions. If you are dealing with a parameter transaction, the target transaction appears in the right hand column under Tcode (original).

3. Select the required transaction and then choose the appropriate pushbutton.

   The system displays a list of the authorization objects involved along with their Check Indicators.

   Using the pushbuttons, you can display field values for individual objects as well as the SAP-default values for check indicators. SAP-default values you have changed are displayed in color.

   Choose the Info Auth. obj. pushbutton to display a help text for the object that is currently marked.

4. Set the check indicator to N to stop the check. See the note below regarding parameter transactions.
5. Save your settings.

The default values and the check indicator of an authorization object are important for the Profile Generator. These values are only displayed for changing in the Profile Generator if you have set the check indicator to CM (check / maintain).

If you have set authorization checks for your own transactions, you need to enter the authorization objects which you have used into Transaction SU24 manually and also maintain the check indicators.

Authorization objects used in parameter transactions cannot be excluded from a check directly, only using the authorization objects in the corresponding target transaction.

If you want to set the check indicator of parameter Transaction XYZP to N, you need to change the check indicator for the target Transaction XYZE. You can find the name of this transaction in the right-hand column of the transaction overview in Transaction SU24. If you double–click the transaction code, the system goes directly to check indicator maintenance.

If the authorization object for parameter Transaction XYZP is set to C (check) but under the target transaction it is set to CM (check/maintain), the field values which have been maintained for XYZE will be proposed in the Profile Generator. If the authorization object is also set to CM in XYZP, the field values maintained for XYZP will be proposed in the Profile Generator, and the entries for XYZE will be overridden.

When using Transaction SU24 for parameter transactions you can only maintain and/or overwrite the field values of the target transaction.