SAP中AUTHORITYCHECK 的使用

1.创建Data ElementTCODE SE801) 创建Data ElementName: Z_EMP_ID00Field Label属性 Length Field Label Short 10 ID Medium 15 EMPLOYEE ID Long 20 EMPLOYEE EMPLOYEE ID Heading 19 EMPLOYEE ID HEADING2) 为Z_EMP_ID00创建一个DomainName Z_EMP_ID00 Data Type NUMC No. Characters 10 Decimal Places 0 Output Length 102.创建Authorization FieldsTCODE SU20Field Name ZEMPID00 Data element Z_EMPID003.创建Authorization Object多个Authorization Fields是被归在一个Authorization Object中的,创建好Object后需要把Z_EMPID00 assign给它.TCODE SU21图SU21-1 (SU21界面)1) 创建一个Object class ZEMPObject Class ZEMPText Employee Object class.2) 在ZEMP里创建一个Authorization Object ZEMPOBJ00Object ZEMPOBJ00 Text Employee object 00. Field name ZEMPID00图SU21-2 (创建Authorization Object)图SU21-3 (Object Class和Authorization Object创建完毕)4.为用户添加Profile这个Profile包含用户对Object ZEMPOBJ00的各个Field有权限访问的具体范围.1) 创建ProfileTCODE SU01在菜单Enviroment Mainten Profile(F9)Profile: ZEMPRF00选择Create.图SU01-1 (创建Profile)在下半部分的表格中的Object列中添加ZEMPOBJ00,Save, 激活Authorization列输入ZAHUEMP,双击新建它Text: Authorization for Employee.点击Maintenance Value, 在From列和To列分别输入*分别激活Authorization, Profile.图SU01-2 (Profile 创建完毕)2) 将ZAHUEMP assign给用户BCUSER.然后回到SU01对BCUSER的界面, 在Profile面板:添加ZEMPRF00,Save.5.创建RoleTCODE PFCGRole ZEMPR选择Single Role1) Description: Maintenance Employee ID在Authorizations面板中:Profile Name ZEMPRF00 Profile Text Employee Profile2) 给这个Role添加用户在User面板中:User: BCUSER6.创建测试程序REPORT ZAUTHORITY01.DATA: Z(20) VALUE abc.AUTHORITY-CHECK OBJECT ZEMPOBJ00 ID ZEMPID00 FIELD Z.WRITE:/ Z.IF SY-SUBRC = 0.WRITE:/ PASS.ELSE.WRITE:/ Sorry.ENDIF.7.运行程序用户BCUSER必须先退出系统然后登录后前面设置的role才会生效.运行程序,结果为PASS.