Show TOC

Maintaining Authorization Default Values Using Trace Evaluation in Transaction SU22 or SU24Locate this document in the navigation structure

Use

You are editing authorization default values in a development system with transaction SU22 or in a customer system with transaction SU24.

Procedure
  1. Start the trace evaluation tool by choosing the Trace button.

    In the dialog box, the authorization object that you selected in the previous view (by default, the first object for the application) is displayed together with its default status and values of all of the fields. You can use the arrow keys or the input help to display the other authorization objects for the application.

  2. Select the authorization object and the corresponding default status. You can only maintain values if the default status is Yes.

  3. To transfer relevant data from a trace for this authorization object, choose the Evaluate Trace button.

    You have the following options:

    • You can start the authorization trace either in the current system by choosing Start of the navigation path Authorization Trace Next navigation step Local End of the navigation path or a remote system by choosing Start of the navigation path Authorization Trace Next navigation step Target System End of the navigation path.

    • You can start the system trace (transaction ST01 or STAUTHTRACE) either in the current system by choosing Start of the navigation path System Trace Next navigation step Local End of the navigation path or in the target system by choosing Start of the navigation path System Trace Next navigation step Target System End of the navigation path. Then perform the significant actions for the authorization checks for the object.

      For the local system trace, when you choose the Trace button, a dialog box appears, containing buttons with which you can control the trace.

      1. To display trace data that exists, choose return, or the Evaluate button.

      2. To start the trace, choose Activate Trace.

      3. Execute the application as fully as possible in a separate session on the same applicaiton server.

      4. Deactivate the trace by choosing Deactivate Trace. Otherwise, it continues to collect data until the trace file overruns.

      5. Display the collected trace data by choosing return or the Evaluate button.

      In the case of the system trace in a target system, only the Evaluate button is available in the dialog box. Before you can evaluate data for the target system, you need to start the trace in the target system specified in the RFC destination, execute the application as fully as possible on the same application server as the one the trace is running on, and then end the trace.

  4. To transfer the field values of an authorization object from the trace, select the field or the entire row or column containing the values to be transferred. Then choose the Apply button.

Additional Functions

You can use the Callpoints button to find the points in the program at which the authorization check is performed with this object, field, and value. The authorization trace records this combination only once, even if it is included multiple times in different programs.