(GLUE-1811) Custom Glue Authorizations

Owned by SNP
Nov 30, 2018

Glue uses the following authorization objects:

  • /DVD/GLUE1 – access to SAP tables
  • /DVD/GLUE2 – Glue object access (currently implemented only for extractors)
  • /DVD/GLUES – access to Storage tables.
  • S_TABU_DIS – standard SAP authorization object for data access

Glue actions

Actions available in Glue authorization objects are:

    • CRE_GLUE11 → Create table in Glue11
    • DIS_GLUE11 → Display table in Glue11
    • DIS_GLUE16 → Display storage table data in Glue16
    • MAN_GLUE14 → Manage table in Glue14
    • DIS_EXT → Display extractor
    • MAN_EXT → Create and manage extractor
    • RUN_EXT → Run extraction
    • MAN_BPL → Create, manage and execute business objects (not supported yet)
    • CRE_TMS → Create Glue transport
    • IMP_TMS → Import Glue transport

Object /DVD/GLUE1

Fields:

  • TABNAME - SAP table name
  • GLUEACTION - Glue action
  • DLVUNIT - Software component

Usage:

  • Importing fields from SAP table into Glue Data Dictionary
  • Display, create, change or manage an extractor with an SAP table
  • Extraction from or into an SAP table

Object /DVD/GLUE2

This object currently supports only extractor actions.

Fields:

  • GL_OBJ_NM - Glue object name
  • GL_OBJ_TP - Glue object type
  • DEVCLASS - SAP development class (nowadays known as “package”)
  • GLUEACTION - Glue action

Usage:

  • Manage Extractor (Create, Change, Manage)
  • Display Extractor
  • Create Variant (authorized with extractor name and type extractor)
  • Run Variant (authorized with extractor name and type extractor)

Object /DVD/GLUES

Fields:

  • STORAGEID - Storage ID

  • TABNAME - Storage table name

    We recommend following a strict naming convention for tables on an external storage to group tables based on their data, functional area or source system. We also recommend that you ensure that tables on an external storage don't have the same table name as on the SAP system. This is important for avoiding any kind of misunderstanding or mix up.

  • DEVCLASS - SAP development class (nowadays known as “package”)
  • GLUEACTION - Glue action

Usage:

  • Display Glue table
  • Create Glue table
  • Change Glue table
  • Manage table in /DVD/GL14
  • Display data in /DVD/GL16
  • Display, create, change or manage an extractor with a Glue table
  • Extraction from or into a Glue table

Object S_TABU_DIS

We implemented also the standard SAP authorization object S_TABU_DIS for data access. It can be used together with /DVD/GLUE1 or as its replacement.

Fields:

  • DICBERCLS - Table Authorization Group
  • ACTVT - Activity

Usage:

  • Create, change or manage an extractor with an SAP table
  • Extraction from or into an SAP table