SAP中AUTHORITY-CHECK 的使用.doc

1.创建data elementtcode se801) 创建data elementname: z_emp_id00field label属性 length field label short 10 id medium 15 employee id long 20 employee employee id heading 19 employee id heading2) 为z_emp_id00创建一个domainname z_emp_id00 data type numc no. characters 10 decimal places 0 output length 102.创建authorization fieldstcode su20field name zempid00 data element z_empid003.创建authorization object多个authorization fields是被归在一个authorization object中的,创建好object后需要把z_empid00 assign给它.tcode su21图su21-1 (su21界面)1) 创建一个object class zempobject class zemptext employee object class.2) 在zemp里创建一个authorization object zempobj00object zempobj00 text employee object 00. field name zempid00图su21-2 (创建authorization object)图su21-3 (object class和authorization object创建完毕)4.为用户添加profile这个profile包含用户对object zempobj00的各个field有权限访问的具体范围.1) 创建profiletcode su01在菜单enviroment mainten profile(f9)profile: zemprf00选择create.图su01-1 (创建profile)在下半部分的表格中的object列中添加zempobj00,save, 激活authorization列输入zahuemp,双击新建它text: authorization for employee.点击maintenance value, 在from列和to列分别输入*分别激活authorization, profile.图su01-2 (profile 创建完毕)2) 将zahuemp assign给用户bcuser.然后回到su01对bcuser的界面, 在profile面板:添加zemprf00,save.5.创建roletcode pfcgrole zempr选择single role1) description: maintenance employee id在authorizations面板中:profile name zemprf00 profile text employee profile2) 给这个role添加用户在user面板中:user: bcuser6.创建测试程序report zauthority01.data: z(20) value abc.authority-check object zempobj00 id zempid00 field z.write:/ z.if sy-subrc = 0.write:/ pass.