How to Provide Proxy AuthorizationUsing Customer Exit Variable
Applies to:
SAP BW 3.5 & BI 7.0. For more information, visit the EDW homepage.
Summary
This Article will help you in understanding the use of Customer Exit Variable in providing Proxy Authorizationto the users. The article assumes no prior knowledge of authorization objects and provides an exhaustivesolution replete with screenshots for clear understanding.
Author: Aravind Gunta
Company: MahindraSatyam Computer Services Ltd.
Created on: 26th
July 2010
Author Bio
Working as a BI consultant with MahindraSatyam Computer Services Ltd. Skill set includes SAPBusiness Intelligence.
Business Scenario ........................................................................................................................................ 3
The Result .................................................................................................................................................... 3
Create a customer exit variable and use it in the report. .......................... .......................... ........................ . 3
Step By Step Procedure ........................... ........................ ......................... .......................... .......................... 4
Create an ODS Object: ......................... ........................ ......................... .......................... .......................... 4
Check data in the ODS. ....................... ......................... ......................... .......................... .......................... 4
Create an Info-Object: ............................................................................................................................... 5
Maintain the proxy user data in the Info-Object. .......................... ......................... ........................ .............. 6
Create Query for the ODS created: ....................... ......................... .......................... ........................ .......... 7
Restric the Project number with the variable created. .......................................... ......................... .............. 8
Go to the query designer and execute the Query created: ....................... ......................... ........................ 13
Execute the Query: .......................... .......................... ........................ ......................... ........................... .. 14
Result of the Query: ......................... .......................... ........................ ......................... ........................... .. 15
Related Content .......................... ......................... ......................... ......................... ........................... .......... 16
Disclaimer and Liability Notice .......................... ......................... ......................... ......................... ................ 17
8/17/2019 How to Provide Proxy Authorization Using Customer Exit Variable.
In this Article we will discuss on how to provide Proxy Authorization of an existing user to a new userby using Customer Exit Variable. Here we will discuss this using a simple scenario.
Business Scenario
In your project you have given authorization to the users in such a way that they will be able to viewonly those records in the query result for which they are authorized to. Here we will take a simple scenario ofProject to Project manager mapping. Here when the project manager executes the query in portal he will beable to view only those projects which are mapped to him.
Now you want to give access to another user and this user should have access same as the existinguser. I.e. the new user should also be able to see the same number of records as the existing user.
Let us consider that, Mr. A is an existing user and Mr. B is a new user (for whom access need to be given,same as the existing user Mr. A). When Mr. A executes a report, he is able to view around 12 records andthe same data and same number of records should be accessed by the user Mr. B also. In our scenario wewill take Mr. A as 44619 and Mr. B as 58240 (user IDs).
Here we will consider that the Project Manager 44619 is mapped to 12 projects. We need to provide Proxy Authorization to 58240 as that of 44619.
The Result
When 58240 execute a report in portal, he will be able to view only those records to which 44619 isauthorized to, i.e. 58240 will be able to view 12 projects only (which are mapped to 44619).
Solution
Create a customer exit variable and use it in the report.
To achieve the above required result, we are going to use a customer exit variable in the report.Before that we need to get the Project to Project Manager mapping into a table and we need to maintain theproxy access list also in a separate table.
In place of the table to maintain Project to Project Manager Mapping we will use an ODS in our case.In this ODS we will be having the Project to Project Manager mapping. The ODS will be having two key fields
Project and Project Manager. Here we can check how many projects are mapped to a particular ProjectManager. This ODS will act as a reference to us.
In place of the table for Proxy user list we will maintain an info-object. For this info-object we willmaintain an attribute (for existing user id) and maintain the Proxy user list in this Info-Object. In the nextsteps we will discuss this in detail. This Info-Object will act as a reference for the Proxy user list for us.
8/17/2019 How to Provide Proxy Authorization Using Customer Exit Variable.
Create an ODS with Project and Project Manager as Key fields ( because a single Project Managercan have n number of Projects and a single Project can be assigned to n number of Project Managers). Nowfill the ODS with Project to Project Manager Mapping data.
Check data in the ODS.
After loading the Project to Project Manager Mapping data into the ODS, we can check the Activedata table for the Project to Project Manager Mapping data, there are about 12 projects mapped to the user44619.
8/17/2019 How to Provide Proxy Authorization Using Customer Exit Variable.
We are going to use this Info-Object to maintain the Proxy users list. For this Info-Object we aregoing to maintain an attribute. Please check below screen shot from more information.
8/17/2019 How to Provide Proxy Authorization Using Customer Exit Variable.
Go to the Query designer and create a Query based on the ODS object created. Now for theCharacter Project Number we need to create a customer exit variable.
Below is the screen shot for the variable that need to be created.
Type of Variable is Character.
Processing by is Customer Exit.
Characteristic is Project Number
8/17/2019 How to Provide Proxy Authorization Using Customer Exit Variable.
Now we need to maintain customer exit for the variable created, this will be done as below.
In order to start it is necessary to activate a new project for a SAP enhancement. So as to execute that you
need to call the transaction CMOD, give name for your project and press the button ‘create’. A second
screen requesting a short description will be showed, just enter the required information and ‘save’.
1 2
It is necessary to inform the enhancement for your new project. In the list, select that one responsible forhandle the variables in the BI/BW queries: ‘RSR00001 – BI: Enhancements for Global Variables in r eporting’.
Choosing ‘components’, it is possible to verify that function module EXIT_SAPLRRS0_001 is alreadyassigned for the new project, selecting that one (by double clicking), system jumps to the function moduledefinition which has basically an instruction like ‘INCLUDE ZXRSRU01.’. Actually the report ZXRSRU01 isreserved for store the customer code which will manage the variable values in the BW query.
The most important information here is that the ‘customer exit program’ will receive the variable name of theBW query in the ABAP variable ‘i_vnam’, which is defined as an import parameter in the function moduleEXIT_SAPLRRS0_001 and the BW query’s variable value is handled in the table E_T_RANGE.
We can get the user ( the user logged in ) from the system variable SY-UNAME.
8/17/2019 How to Provide Proxy Authorization Using Customer Exit Variable.
*&---------------------------------------------------------------------**& Include ZXRSRU01*&---------------------------------------------------------------------*
DATA: l_s_range TYPE rsr_s_rangesid.
CASE: i_vnam.
WHEN 'ZAIC_VAR'.
CLEAR: l_s_range.
DATA: BEGIN OF it_itab2 OCCURS 0,
cpr_ext_id LIKE /bic/azflclods00-cpr_ext_id,
END OF it_itab2.
DATA: wa_z_userid TYPE /bic/pz_userid,
lv_uname(12)." type /BIC/PZ_USERID.
CALL FUNCTION 'CONVERSION_EXIT_ALPHA_INPUT'
EXPORTINGinput = sy-uname
IMPORTING
output = lv_uname.
* now we need to check for the proxy user list,
* here we will check the Proxy User mapped to Existing User.
SELECT SINGLE *
FROM /bic/pz_userid
INTO wa_z_userid WHERE /bic/z_userid = lv_uname.
IF sy-subrc EQ 0.
CALL FUNCTION 'CONVERSION_EXIT_ALPHA_OUTPUT'
EXPORTING
input = wa_z_userid-/bic/zexis_id
IMPORTING
output = lv_uname.
* end of checking the Proxy user list.
ELSE.
* default user logged in.
lv_uname = sy-uname.
ENDIF.
IF i_step = 2.
SELECT cpr_ext_id FROM /bic/azflclods00 INTO
TABLE it_itab2 WHERE /bic/zuser_id = lv_uname .
8/17/2019 How to Provide Proxy Authorization Using Customer Exit Variable.
How to Provide Proxy Authorization Using Customer Exit Variable
Disclaimer and Liability Notice
This document may discuss sample coding or other information that does not include SAP official interfaces and therefore is not
supported by SAP. Changes made based on this information are not supported and can be overwritten during an upgrade.
SAP will not be held liable for any damages caused by using or misusing the information, code or methods suggested in this document,
and anyone using these methods does so at his/her own risk.
SAP offers no guarantees and assumes no responsibility or liability of any type with respect to the content of this technical article orcode sample, including any liability resulting from incompatibility between the content within this document and the materials and
services offered by SAP. You agree that you will not hold, or seek to hold, SAP responsible or liable with respect to the content of this
