2015年sap abap安豆乔老师培训教程44课英文flv adkj15讲authorization

1、 SAP BC400SAP BC400 Authorization CheckAuthorization Check 权限检查权限检查 page 2 In this lesson, you will learn why an authorization check is useful and how to include it in your programs. 本课程中，我们将学习为什么权限检查是有用的和 如何在我们的程序中包含权限检查 Lesson Overview page 3 After completing this lesson, you will be able to: Expl

2、ain the SAP authorization concept Implement authorization checks 完成本课程，我们将能够： 解释SAP权限概念 实现权限检查 Lesson Objectives page 4 Authorization ChecksAuthorization Checks Critical data and parts of the functional scope of the SAP System must be protected from unauthorized access. You have to implement authori

3、zation checks in your program so that the user may only access areas for which he or she is authorized. The following graphic illustrates the SAP authorization concept. SAP系统的关键数据和 部分功能必须被保护而 不被无权地访问。我们 必须在我们的程序中实 现权限检查，以便用户 只访问其授权的部分。 图示说明了SAP权限概 念。 page 5 Authorization ChecksAuthorization Checks A

4、uthorization objects can be defined within object classes. When you define an authorization object, you have to specify appropriate fields (without values). You create an actual authorization by subsequently assigning values to these fields. This authorization can be integrated into the required use

5、r master records by means of an authorization profile. Several different authorizations (for the integration into different user master records) can be created for an authorization object. 权限对象可以在对象类中被定义， 当我们定义一个权限对象，我们 必须指定适当的字段。我们随后 通过给这些字段分配值来创建实 际的权限对象。这个权限能够被 通过权限参数文件被集成到需要 的用户主数据中。 多个不同的权限可以被创

6、建在一个 权限对象中。 page 6 Authorization ChecksAuthorization Checks At runtime, you can use the AUTHORITY-CHECK statement to check whether the current user has the authorization required for executing the function in his or her user master record. Depending on the check result (sy-subrc), you can continue y

7、our program accordingly: 在运行时，我们可以使 用AUTHORITY-CHECK 语句来检查当前用户在其 用户主记录中是否有必需 权执行功能。根据检查结 果（sy-subrc），我们可 以因此继续我们的程序： page 7 Authorization ChecksAuthorization Checks Depending on the check result (sy-subrc), you can continue your program accordingly: sy-subrc = 0: User has required authorization - di

8、splay data, for example sy-subrc 0: Authorization not available - display error message to user, for example. 根据检查结 果（sy-subrc），我们可 以因此继续我们的程序： sy-subrc = 0：用户有权 限必需权限 -例如显示数据 Sy-subrc 0：没有权限 - 例如给用户显示错误信息。 page 8 Authorization ChecksAuthorization Checks Under normal circumstances, the definition of

9、 authorization objects is part of data modeling and the creation of database tables. Since we access an existing data model in this course, we use the authorization object S_CARRID that belongs to this data model. 通常情况下，权限对象的定义是 数据模型和数据库表的一部分。 本课中我们访问一个已经存在的 数据模型，我们因此使用属于这 个数据模型的权限对象S_CARRID。 page 9

10、 Authorization ChecksAuthorization Checks Implementing the authorization concept is one of the tasks of the developer who programs access to the database tables. The subsequent steps, such as defining the authorizations and profiles and designing the user master records, belong to the tasks of the a

11、dministrator. 实行权限的概念是编程访问数据 库表的开发人员的任务之一。 后续的步骤，如定义权限和参数 文件和设计用户主数据记录，属 于管理员的任务。 page 10 Authorization ChecksAuthorization Checks Before you can implement the required authorization check in your program, you must first determine the structure (the fields) of the respective authorization concept. A

12、n object usually consists of the ACTVT (activity) field and one other field, which specifies the data type to be protected (i.e., material number, airline and so on.) The values of these authorization fields specify what the user is authorized to do. 在我们能够在我们的程序中实行 必需的权限检查之前，我们必须 首先确定各自权限概念的结构（ 字段）。

13、一个对象通常包含 ACTVT字段和一个其它字段，指 定被保护的数据类型。这些权限 字段的值指定了用户有做什么的 权限。 page 11 Authorization ChecksAuthorization Checks You can display an authorization object directly in the ABAP Workbench (for example, by using the Other Object . pushbutton, or the Other tab page). You can also use transaction SU21. You wil

14、l also get an overview of all the authorization objects created in the system here. 我们可以在ABAP工作台中直接显示权限对象，我们也可以使用交易事务SU21 来显示权限对象。我们也将在系统这里概览权限对象的创建。 page 12 Authorization ChecksAuthorization Checks The following graphic shows how an authorization check is implemented. 图示展示了权限检查是如何实现的。 page 13 Autho

15、rization ChecksAuthorization Checks For the authorization check in the program, you specify the authorization that is to be checked in the master record of the current user. The authorization is specified by specifying the authorization object, its fields, as well as the appropriate field values. Re

16、fer to the syntax in the above graphic. 对于程序中的权限检查， 我们指定在当前用户主 记录中要被检查的权限。 这个权限通过指定权限 对象、它的字段，和适 当的字段值来指定。 page 14 Authorization ChecksAuthorization Checks In our example, there is a check as to whether the user has authorization for the S_CARRID object, in which the field CARRID (airline) contains

17、the airline entered by the user, and the field ACTVT (activity) contains the value 03 (display). 在我们的例子中，有是否 用户有对象S_CARRID的 权限检查，字段CARRID 包含用户的航空公司，字 段ACTVT包含值03 page 15 Authorization ChecksAuthorization Checks After the AUTHORITY-CHECK statement, you should check the return code sy-subrc and monitor further processing of your program accordingly. 在AUTHORITY-CHECK语句之后，我们应该检查返回码sy-subrc，并相应地实 行程序的进一步处理。 page 16 Authorization ChecksAuthorization Checks AUTHORITY-CHECK statement generated into your source code using the Pattern button. After