SAP ABAP Authorization

An authorization group is a group that can be defined to restrict access to executing/maintaining programs in SAP. An authorization group can be allocated for each program and users can then be given access to perform functions for specific authorization groups only.

The foundation of SAP security. Objects serve as a template for coding access checks in ABAP programs and for establishing user access rights. When values are defined for authorisation objects these are referred to as authorizations.

T-code SU21 Maintain Authorization Objects

T-code SU20 Maintain Authorization Fields

 

ABAP Code to check authorization -

Authorization Object	S_TCODE
Field	TCD
Values	Any transaction code

CALL 'AUTH_CHECK_TCODE'

     ID 'TCODE' FIELD objectname.

AUTHORITY-CHECK OBJECT 'S_TCODE'

             ID 'ACTVT' FIELD '02'  "Check display = 2 access
             ID 'TCD' FIELD 'VA03'. " for transaction code VA03