Switch off authorization checks globally (optional)

Activities

You can switch off the check on individual authorization objects globally (Transaction code auth_switch_objects).

See the transaction for information on how you do this.

You should only do this if you do not want to use all the functions for authorization checks in your R/3 System.

Further Notes

Excluding authorization objects from the check depends on the client.

The current status of globally deactivated authorization objects is saved in the application log (Transaction SLG1) under the object name PRGN_LOG_OBJ.

For authorization objects that are switched off, no authorization data is created in the Profile Generator.

Note that when you switch on authorization objects that have been switched off, you may have to reprocess the authorization data of many activity groups and regenerate profiles.

Basis and HR authorization objects (beginning with S_... and P_...) cannot be excluded from the check.

You can display the authorization objects that are excluded from the check using transaction code auth_display_objects.

No comments:

topics