(GLUE-1812) Custom Glue Authorizations
Glue uses the following authorization objects:
- /DVD/GLUE1 – access to SAP tables
- /DVD/GLUE2 – Glue object access (currently implemented only for extractors)
- /DVD/GLUES – access to Storage tables.
- S_TABU_DIS – standard SAP authorization object for data access
Glue actions
Actions available in Glue authorization objects are:
- CRE_GLUE11 → Create table in Glue11
- DIS_GLUE11 → Display table in Glue11
- DIS_GLUE16 → Display storage table data in Glue16
- MAN_GLUE14 → Manage table in Glue14
- DIS_EXT → Display extractor
- MAN_EXT → Create and manage extractor
- RUN_EXT → Run extraction
- MAN_BPL → Create, manage and execute business objects (not supported yet)
- CRE_TMS → Create Glue transport
- IMP_TMS → Import Glue transport
Object /DVD/GLUE1
Fields:
- TABNAME - SAP table name
- GLUEACTION - Glue action
- DLVUNIT - Software component
Usage:
- Importing fields from SAP table into Glue Data Dictionary
- Display, create, change or manage an extractor with an SAP table
- Extraction from or into an SAP table
Object /DVD/GLUE2
This object currently supports only extractor actions.
Fields:
- GL_OBJ_NM - Glue object name
- GL_OBJ_TP - Glue object type
- DEVCLASS - SAP development class (nowadays known as “package”)
- GLUEACTION - Glue action
Usage:
- Manage Extractor (Create, Change, Manage)
- Display Extractor
- Create Variant (authorized with extractor name and type extractor)
- Run Variant (authorized with extractor name and type extractor)
Object /DVD/GLUES
Fields:
- STORAGEID - Storage ID
TABNAME - Storage table name
We recommend following a strict naming convention for tables on an external storage to group tables based on their data, functional area or source system. We also recommend that you ensure that tables on an external storage don't have the same table name as on the SAP system. This is important for avoiding any kind of misunderstanding or mix up.
- DEVCLASS - SAP development class (nowadays known as “package”)
- GLUEACTION - Glue action
Usage:
- Display Glue table
- Create Glue table
- Change Glue table
- Manage table in /DVD/GL14
- Display data in /DVD/GL16
- Display, create, change or manage an extractor with a Glue table
- Extraction from or into a Glue table
Object S_TABU_DIS
We implemented also the standard SAP authorization object S_TABU_DIS for data access. It can be used together with /DVD/GLUE1 or as its replacement.
Fields:
- DICBERCLS - Table Authorization Group
- ACTVT - Activity
Usage:
- Create, change or manage an extractor with an SAP table
- Extraction from or into an SAP table