Access Denied Sy-subrc 15 — Ad-Free

Use transaction SU53 immediately after the failure.

Step 1: Run your program → Get SY-SUBRC = 15
Step 2: /nSU53 (in command field)

SU53 shows exactly which authorization object, field, and value failed.

Your own ABAP program contains:

AUTHORITY-CHECK OBJECT 'Z_SALES'
  ID 'VKORG' FIELD '1000'
  ID 'ACTVT' FIELD '02'.
IF SY-SUBRC = 15.
  MESSAGE 'Access denied to sales org 1000' TYPE 'E'.
ENDIF.

Root Cause: The user’s profile is missing Z_SALES for VKORG 1000 and ACTVT 02.

Solution:

If a production process is blocked:

SELECT SINGLE * FROM sflight
  WHERE carrid = 'AA'.
IF sy-subrc = 15.
MESSAGE 'No authorization to read SFLIGHT' TYPE 'E'.
ENDIF.
 access denied sy-subrc 15

→ Even if data exists, if user lacks S_CARRID / S_FLIGHT authorization, SY-SUBRC will be 15. Use transaction SU53 immediately after the failure

For file access, the relevant authorization object is S_DATASET.
Use transaction SU53 immediately after the error occurs to see missing authorizations.