topic Re: Authorization Objects : Preference * vs ' ' ? in Application Development and Automation Discussions

Authorization Objects : Preference * vs ' ' ?

Former Member — Wed, 02 Jan 2013 14:10:14 GMT

Dear all,

I have a question regarding order preference.

For instance:

- We create 2 roles role A and B

- Role A has assigned * (global authorization) to the field of the authorization object called X

- Role B has assigned ' ' (global denied) to the field of the same authorization object called X

- Role A and B assigned to user "SAP_TEST"

If the user SAP_TEST is doing an accion that needs the autorization object X, so, wich value has preference, * or ' '? In that case, the SAP system will deny all (' ') or accept all (*) ?

Looking forward to your reply.

Many thanks in advance!

Best regards,

Re: Authorization Objects : Preference * vs ' ' ?

Former Member — Wed, 02 Jan 2013 14:29:49 GMT

Take a guess?

Tip: try test it before you use the 50:50 or audience joker .. 😉

Cheers,

Julius

Re: Authorization Objects : Preference * vs ' ' ?

Former Member — Wed, 02 Jan 2013 15:03:56 GMT

I'm trying to find an example for this case without success.

It was a theoretical question more than practical, if ' ' has preference than * .

Could you please help me?

Many thanks in advance.

Cheers

Re: Authorization Objects : Preference * vs ' ' ?

jurjen_heeck — Thu, 03 Jan 2013 09:20:32 GMT

Best let go of the term 'preference'. An authorization check will succeed if a role/profile with sufficient authorizations is found in the user master record.

Re: Authorization Objects : Preference * vs ' ' ?

Former Member — Thu, 03 Jan 2013 09:57:51 GMT

Agree

System will take the Union of all assigned roles.