This website is not affiliated with, sponsored by, or approved by SAP AG.

Logging successful authority checks

Basis (Basis Technology Modules: Basis Component/System Administration, GUIs)

Moderators: Snowy, thx4allthefish

Logging successful authority checks

Postby Bebop » Tue May 14, 2013 8:05 am

Hey guys,

just wondering: is there any chance to log successful authority checks as in:

Code: Select all
AUTHORITY-CHECK OBJECT 'F_LFA1_BUK'
         ID 'BUKRS' FIELD '1234'
         ID 'ACTVT' FIELD '01'.
IF sy-subrc <> 0.
*  message ...
ENDIF.


The purpose would be to find out not only which transactions users are actually using but also with which org elements, e.g. company code, sales org., etc.

So, is there any chance to log those calls ? Only for a limited time of course. SM19 doesn't do it. Any other chance ?

Best regards
Frank
Bebop
 
Posts: 79
Joined: Mon Jun 06, 2011 9:13 am

Re: Logging successful authority checks

Postby Gothmog » Tue May 14, 2013 8:24 am

Use ST01 to log the Autorization checks ?
68 74 74 70 3a 2f 2f 74 69 6e 79 75 72 6c 2e 63 6f 6d 2f 62 64 6f 37 6d 77 67
Gothmog
 
Posts: 1941
Joined: Wed Sep 12, 2007 4:46 am
Location: Probably not home

Re: Logging successful authority checks

Postby Bebop » Tue May 14, 2013 10:27 am

Hey, thanks a lot, that will probably work !

Best regards
Frank
Bebop
 
Posts: 79
Joined: Mon Jun 06, 2011 9:13 am

Re: Logging successful authority checks

Postby Gothmog » Tue May 14, 2013 10:44 am

It should - that's what I use when I want to know what authorization objects to check in a custom transaction based on the standard ones.
68 74 74 70 3a 2f 2f 74 69 6e 79 75 72 6c 2e 63 6f 6d 2f 62 64 6f 37 6d 77 67
Gothmog
 
Posts: 1941
Joined: Wed Sep 12, 2007 4:46 am
Location: Probably not home

Re: Logging successful authority checks

Postby Bebop » Tue May 14, 2013 10:54 am

Well, we have to reorganize the complete authorization concept at a customer. They currently have way to much auths, any auditor will kill them for that. So, we need to know what the users are actually using. Not only the transaction code but also the activity and especially the parameters such as sales org, distr. channel, etc. So, we'll use that trace for a while to find out and I will write a report to extract and summarize the successful auth checks. Doesn't look like a lot of fun, but it will work.

Thanks !
Frank
Bebop
 
Posts: 79
Joined: Mon Jun 06, 2011 9:13 am


Return to Basis

Who is online

Users browsing this forum: No registered users and 8 guests





loading...


This website is not affiliated with, sponsored by, or approved by SAP AG.