-1

I wrote some ABAP code which allows to call a SAP report via RFC and return the result as JSON.

Now it would be very nice, if I could determine which reports a given user is allowed to execute.

Is there a way to get the list of reports which the current user is allowed to execute?

Sandra Rossi
  • 11,934
  • 5
  • 22
  • 48
guettli
  • 25,042
  • 81
  • 346
  • 663
  • It depends how the authorizations are built in your company. Ask the SAP administrator. Probably he has defined authorizations based on authorization objects `S_PROGRAM` or `S_TCODE`. If based on S_PROGRAM, you may retrieve authorizations based on class `CL_AUTH_OBJECTS_TO_SQL` and table `TRDIR` (where the executable programs are the rows with column SUBC = '1'). – Sandra Rossi Dec 18 '18 at 13:00
  • Possible duplicate of [SAP-RFC: List allowed methods? (Introspection)](https://stackoverflow.com/questions/51739718/sap-rfc-list-allowed-methods-introspection) – Suncatcher Jan 22 '19 at 07:36
  • You already asked this question and was already answered that no, it's impossible. Don't double-post. – Suncatcher Jan 22 '19 at 07:37

2 Answers2

1

Authorisation in SAP is managed using Authorisation Objects, which contain a list of authorisation fields (tcodes, programs, etc) with the role(s) that are allowed to access them. These Authorisation Objects can be displayed and maintained using transaction code SU21 (Maintain Authorisation Objects).

You can use the User Information System (transaction code SUIM) to see existing roles and the authorisation objects that are associated with them. If you need to maintain roles, you can do so in Role Maintenance (transaction code PFCG).

You can check which role a specific user is assigned to by checking the Roles tab in User Maintenance (transaction code SU01). In this transaction, you can also reassign specific users to a certain role.

I recommend reading through the ‘Authorisation Concept’ help page on the SAP website, which details the approach to protection and security in SAP. I would also recommend this page on Authorisation Checks, which provides some background on how the SAP standard authorisation objects are organised.

Community
  • 1
  • 1
L.P. Blake
  • 376
  • 2
  • 6
  • 21
0

You can use transaction SUIM to find out the transactions / reports are allowed to execute for specific user.

Umar Abdullah
  • 1,282
  • 1
  • 19
  • 37