Authorization Objects for Document Access

0% found this document useful (0 votes)
139 views1 page
This document discusses three SAP authorization objects: 1. C_DRAW_BGR controls access to individual documents and allows further restriction by document type or type/status. 2. C_DRAW_DO…

Uploaded by

Surendra P
  • Authorization Object for using Object Services

Authorization Object for using Object Services

[Link]

Authorization Object C_DRAW_BGR (Authorization Group)


 
The following table shows authorization object C_DRAW_BGR. This authorization object allows you to limit access to
individual documents.
Fields      Possible Values      Description
BEGRU (Authorization group)      0000 - ZZZZ      Used to restrict the authorizations for document maintenance
further.
 
Authorization object C_DRAW_BGR can be used to restrict access to individual documents. It works like a simple
on/off switch. If the check of object C_DRAW_BGR is fine, the user's authorization can be further restricted by
checking C_DRAW_TCD (check only based on the document type) or C_DRAW_TCS (check of the
combination of document type and status). At the fifth level there is a BADI called DOCUMENT_AUTH01, which you
can use to design your own authority check.
 
 
Authorization Object C_DRAW_DOK (Document Access)
 
The following table shows authorization object C_DRAW_DOK. This authorization object controls which original data
of a specific document type there are access authorizations for.
Fields      Possible Values      Description
ACTVT (Activity)      52 53 54 55 56 57      Change application start Display application start Display archive
application Change archive application Display archive Store archive
DOKAR (Document type)            Here you enter the document type that access to original data is allowed for.
 
Authorization Object C_DRAD_OBJ (Object Link)
 
The following table shows authorization object C_DRAD_OBJ. This object controls which users can process which
document info records, based on a combination of activity, object, and status.
Fields      Possible Values      Description
ACTVT (Activity)      01 02 03 06      Create Change Display Delete
DOKOB (Object)            You must enter the data base table for the objects here (for example, MARA for material
record).
STATUS (Document status)
 
if useful rewards points.           
 
Regards,
nitin

Authorization Object for using Object Services (https://scn.sap.com/message/4890013#4890013)
https://scn.sap.com/thread/74455

You might also like