SAP Note 25370 - Invalid access authorization is not logged.

Symptom:

Invalid access authorization is not stored in table USR07.
Specific case: GR12 (Changing Report Writer libraries)

Cause and prerequisites

If an invalid access authorization is determined during an authorization check, it is logged in table USR07. If, however, a rollback occurs within the transaction, this table is also reset. A rollback occurs in case of a termination message, for example. Upon "Process Before Input", all messages are changed into termination messages.
In this specific case, the attempt to use transaction GR12 (program SAPMGRWL) is denied in the function module G_LIBRARY_AUTHORITY_CHECK through a type E system message. This is issued as type A, however, and results in the rollback. The entry in table USR07 is thereby deleted.

Solution
The issuing of the MESSAGE can be prevented by implementing an EXCEPTION when calling up the function module.

Additional key words

AUTHORITY CHECK, Report Writer
Prorams:
SAPMGSGM, SAPMGRWC, SAPMGRWJ, SAPMGRWL, SAPMGRWD, SAPLGRWF

Transactions:
GR11 Create standard Layout
GR12 Change Standard Layout
GR13 Display Standard Layout
GR14 Delete Standard Layout
GR21 Create Library
GR22 Change Library
GR23 Display Library
GR24 Delete Library
GR31 Create Report
GR32 Change Report
GR33 Display Report
GR34 Delete Report
GR41 Create Parallel Report
GR42 Change Parallel Report
GR43 Display Parallel Report
GR44 Delete Parallel Report
GR51 Create Report Group
GR52 Change Report Group
GR53 Display Report Group
GR54 Delete Report Group
GR55 Execute Report Group
GS11 Create Variable
GS12 Change Variable
GS13 Display Variable
GS14 Delete Variable
OPDM Create Variable
OPDN Change Variable
OPDO Display Variable
OPDP Delete Variable