Authorizations for Users
This section provides details about authorization required for classification, protection, viewing log files, reorganizing logs, and viewing data with Excel List Viewer.
Authorizations for Downloading with Protection
For downloading documents and applying protection, the following authorizations are required in addition to the standard object S_GUI checked by SAP:
Auth. Object | Field | Value |
---|---|---|
J_9BSD_PRT | J_9BSD_FGR | File type |
J_9BSD_PFM | Front-end platform | |
S_LDAP | ACTVT | 03 (Display), 51 (Initialize) |
LDAP_SERV | LDAP server name | |
S_USER_GRP | CLASS | (User's own user group) |
ACTVT | 03 (Display) |
Authorizations for downloading with protection
Authorization for Classification
To display Classification UI and applying classification, the following authorization is needed:
Auth. Object | Field | Value |
---|---|---|
J_9BSD_CLU | J_9BSD_PRP | Classification Attribute (Technical key of the attribute/property) |
ACTVT | 02 (Change), 03 (Display) |
Authorization for classification
Authorizations for Log Display
To display the log, the following authorizations are required:
Auth. Object | Field | Value |
---|---|---|
S_TCODE | TCD | /SECUDESD/DISP_LOG |
J_9BSD_LDO | J_9BSD_LDO | Any of the below:
|
S_APPL_LOG
| ALG_OBJECT | /SECUDESD/ |
ALG_SUBOBJ | GUI_DOWNLOAD | |
ACTVT | 03 |
Authorizations for log display
Authorizations for Log reorganization
To delete obsolete log entries, the following authorizations are required:
Auth. Object | Field | Value |
---|---|---|
S_TCODE | TCD | /SECUDESD/DEL_LOG |
J_9BSD_LDO | J_9BSD_LDO | RE: Reorganize entries |
S_APPL_LOG
| ALG_OBJECT | /SECUDESD/ |
ALG_SUBOBJ | GUI_DOWNLOAD | |
ACTVT | 06 |
Authorizations for log reorganization
Authorization for Excel List viewer (XXL)
This object is checked when a user displays data with the Excel List Viewer (XXL) if the check is activated in HaloCORE configuration (transaction /SECUDESD/PARAMS_HC, field "XXL Display", the value "Logging & Auth. Check").
Auth. Object | Field | Value |
---|---|---|
J_9BSD_XXL | TCD | Transaction Code |
TABLE | Table Name: Name of the table(s) or view(s) being displayed. (This information is only available from generic browsing tools like SE16, SE16N, SQ01, SQVI, etc., provided the required enhancement for table name logging has been applied.) |
Authorization for Excel List viewer