Re: Need to know regarding Authroization object S_PROGNAM

Hi

That object is part of a reinforced control on submitted program.

S_PROGRAM authorization check was only taking place if the program is assigned to an authorization group.

1946079 - Initial Authorization Check in Function SUBMIT_REPORT

The programmatic submit of reports is secured by the authorization group the report is assigned to. In case the authorization group is empty, the report may be executed without an initial authorization check.

With this note we provide the following functional improvements:

1. New authorization and API provided by class CL_SABE, method AUTH_CHECK_PROGNAM. In detail the API wraps the following functionality:
   1. Authorization object S_PROGNAM to be used as a switchable authorization.
   2. Authorization scenario BC_GENERIC_REPORT_START.
2. The change in function SUBMIT_REPORT to invoke CL_SABE and as such provide an initial authorization check in case the check is turned on.

Regards