topic Re: over authorization in Application Development and Automation Discussions

over authorization

bashayreh — Tue, 03 Mar 2020 15:18:34 GMT

Hi everyone

in order to give access for a user on a fiori tile, I created a Role that contains the Technical Catalogue of that tile. the result is that the user is able to add new tiles and use them while he should not be able to do so. for example a sales representative is getting access to changing the cost price of items!

please advise what is the best way to solve my issue

best regards

Re: over authorization

VeselinaPeykova — Wed, 04 Mar 2020 06:09:56 GMT

You are not supposed to use technical catalogs directly for creating user roles.

The recommended approach is to create business catalogs referencing technical catalogs with only the needed apps, then you create groups (well thought out groups can make the life of users a bit easier) and use these when you create the PFCG roles.

For more information - refer to the official help documentation: Best Practices for Managing Catalogs.

There is also a nice self-paced openSAP course where this topic is really well explained: Key Technical Topics in a System Conversion to SAP S/4HANA. Enrolling is free of charge.

Re: over authorization

bashayreh — Wed, 04 Mar 2020 09:59:01 GMT

Many thanks veselina.peykova

I will go through your mentioned refrences

best regards

Re: over authorization

former_member612251 — Wed, 04 Mar 2020 12:02:21 GMT

If its sandbox or dev, I dont see any issue with this approach, but for going forward into DEV, QA and PRD you should follow what Veselina has said.