Hierarchy
SAP_BASIS (Software Component) SAP Basis Component⤷
BC-SEC (Application Component) Security⤷
SECU_ABAP (Package) Security and Protection of ABAP Programs
Basic Data
| Data Element | SCEN_HMODE |
| Short Description | Status for Switchable Authorization Checks Scenario |
Data Type
| Category of Dictionary Type | D | Domain |
| Type of Object Referenced | No Information | |
| Domain / Name of Reference Type | SCEN_HMODE | |
| Data Type | CHAR | Character String |
| Length | 1 | |
| Decimal Places | 0 | |
| Output Length | 1 | |
| Value Table |
Further Characteristics
| Search Help: Name | ||
| Search Help: Parameters | ||
| Parameter ID | ||
| Default Component name | ||
| Change document | ||
| No Input History | ||
| Basic direction is set to LTR | ||
| No BIDI Filtering |
Field Label
| Length | Field Label | |
| Short | 6 | Status |
| Medium | 14 | Scen. Status |
| Long | 0 | |
| Heading | 0 |
Documentation
Definition
One of the ways you can influence the general behavior of a scenario-based authorization check by defining a scenario status. Possible statuses are:
- A - Scenario in status "Active" (value for check in accordance with list)
Values are assigned to the result of the authorization check in accordnace with the object listof the scenario.
If an authorization check is performed on an object that is not part of the object list, the result of the authorization check is the same as with the statement AUTHORITY-CHECK OBJECT. - I - Scenario in status "Inactive" (ignore all checks)
Regardless of the result of the authorization check and the content of the object list of the scenario, the value for the check result is always positive.
Caution: This status overrides the settings in the object list. - R - Recording mode (generate new entries in dialog)
Values are assigned to the results of the authorization check in the same way as with the status A. If an authorization is performed in dialog on an object that is not yet part of the object list, the corresponding maintenance dialog from transaction SACF is displayed for semi-automatic maintenance (dialog-based learning mode). - X - Recording mode (set new entries to "Check")
Values are assigned to the results of the authorization check in the same way as with the status A. If an authorization is performed in dialog on an object that is not yet part of the object list, the object is added to the object list with the check status "Actively check without restrictions" (distruptive learning mode). - N - Recording mode (set new entries to "Do Not Check")
Values are assigned to the results of the authorization check in the same way as with the status A. If an authorization is performed in dialog on an object that is not yet part of the object list, the object is added to the object list with the check status "Check deactivated" (non-distruptive learning mode). A value is assigned for the check in accordance with the newly-added object.
Use
Dependencies
The recording in learning mode depends on the settings of the transport system.
In development systems, new entries are added in learning mode both to the object lists of the scenario definition and to the existing active version, if the scenario definition is already contained in an open transport request. If thre is no open requests, new objects are assigned only to the active scenario.
If neither development nor Customizing is permitted in the client, the new objects are added only to active scenarios. For security reasons, the scenario status N has the same effect in this case as the scenario status X.
Example
History
| Last changed by/on | SAP | 20141013 |
| SAP Release Created in | 740 |
