App specific authorisation can be invoked by the selection of the Authorization Checkbox on the Properties screen in the FAB Workbench.
This selection mandates checks to a FAB delivered authorisation object.
- Authorization Object: /IQX/FAB (SU21)
- At these locations :
- /IQX/FAB_GET_DATASET
- FAB Get Data (initial values)
- AUTHORITY-CHECK OBJECT '/IQX/FAB'
ID 'BEGRU' FIELD iv_authority_grp
ID '/IQX/ACTIV' FIELD '01'. “Create
- AUTHORITY-CHECK OBJECT '/IQX/FAB'
- /IQX/FAB_GET_ELEMENTS
(/IQX/LFAB_SERVICESU09 FAB Get Elements (definition XML))- Authorisation to view any App/
- AUTHORITY-CHECK OBJECT '/IQX/FAB'
ID 'BEGRU' FIELD iv_authority_grp
ID '/IQX/ACTIV' FIELD '03'. "Display
- /IQX/FAB_POST_FORM_DATA
(/IQX/LFAB_SERVICESU01 FAB_Changeset End (Post Form Data))- Authorisation to change/create App/Form data.
- AUTHORITY-CHECK OBJECT '/IQX/FAB'
ID 'BEGRU' FIELD ls_header-auth_group
ID '/IQX/ACTIV' FIELD '02'. "Change
- /IQX/FAB_GET_INSTANCE_DATA
/IQX/LFAB_SERVICESU13 FAB Get Instance Data (saved form data)
- Authorisation to view App/Form data.
- AUTHORITY-CHECK OBJECT '/IQX/FAB'
ID 'BEGRU' FIELD ls_header-auth_group
ID '/IQX/ACTIV' FIELD '03'. "Display
- /IQX/FAB_GET_RELATED_DATA
/IQX/LFAB_SERVICESU14 FAB Get Related Data (saved one-to-many form data)
- Authorisation to view App/Form related data.
- AUTHORITY-CHECK OBJECT '/IQX/FAB'
ID 'BEGRU' FIELD ls_header-auth_group
ID '/IQX/ACTIV' FIELD '03'. "Display
Step-by-step guide
Decide if you require form level access control
- Activate the Authorisation in the Properties section of the App in the workbench.
- Maintain the authorisation object /IQX/FAB2 with the required App access
- Assign the Authorisation object to a Role and then assign to the user as required
Related articles
0 Comments