6 Answers

• 00

  

  christian.wahner 10/23/23, 6:16 PM

  Service,
  Why don't you "simply" create a Z-transaction for this report and then assign the rights for KOKR, BUK etc. in the objects.
  This can best be integrated into an authorization concept.
  VG Christian

  report
• 00

  

  exberliner (Author)10/23/23, 6:17 PM

  Hello Christian,
  what do you mean? I'm afraid I don't quite understand yet. If I create a Z-transaction for a Report Painter report, this is just another way to call the report instead of using GR55. The query in the Report Painter report for authorization is still not there.
  Thanks
  Exberliner

  report
• 00

  

  christian.wahner 10/23/23, 6:17 PM

  Hello,
  of course I don't know the authorization concept.
  But through a Z-transaction you have the possibility to include the authorization objects.
  Cost center, internal order, company/accounting area etc. can be restricted by this.
  Of course you need an appropriate role to assign to the user.
  I have attached a screenshot.
  Also a screenshot for the SE93. Here I have also added a selection variant. The user gets a suggestion when calling the transaction.
  The transaction GR55 is not called.
  If the transaction GR55 is assigned, depending upon Berchtigungskonzept, that would be fatal. Possibly the user sees all reports.
  VG Christian

  report
• 00

  

  AFR 10/23/23, 6:17 PM

  Hello all,
  Report Painter / Writer use the normal authorization objects.
  A Z transaction only facilitates calling the report.
  A role is needed with the appropriate restrictions on company code, controlling area, etc.
  You can use TCode STAUTHTRACE to see which authorization objects are queried when the report is run.
  Many greetings
  AnWo

  report
• 00

  

  exberliner (Author)10/23/23, 6:17 PM

  Hello together,
  thanks a lot for your help! This has put me on the right track....
  SAP has changed the authorization check with note 1001733, and currently checks the profit center authorization, and no longer the bukrs authorization. If you want to reactivate it (authorization object G_REPO_LOC) you can do that as described in 1974788. I did this once and checked with an authorization trace - works. After I entered the authorization exit in the GRCT at FAGLFLEXT (E14 instead of E63) the company code is checked in addition to the profit centers. NOTE: we are on S/4HANA here, but still use Report Painter for this complex report for various reasons.
  Regards
  Exberliner

  report
• 00

  

  christian.wahner 10/23/23, 6:17 PM

  exberliner:

  ---

  Hi all,
  thanks for your help! This put me on the right track...
  SAP changed the authorization check with note 1001733, and currently checks the profit center authorization, and not the bukrs authorization anymore. If you want to reactivate this (authorization object G_REPO_LOC) you can do that as described in 1974788. I did this once and checked with an authorization trace - works. After I entered the authorization exit in the GRCT at FAGLFLEXT (E14 instead of E63) the company code is checked in addition to the profit centers. NOTE: we are on S/4HANA here, but still use Report Painter for this complex report for various reasons.
  Greetings
  Exberliner
  

  Great! My information was based on ERP 6.18/NW 7.50.
  

  Last edited 10.06.22 13:06

  report