Role assignment restrictions

[Former Member]

Hi all,

I am trying to restrict role assignment using the object S_USER_AGR. As an example i am using the following in the 'Role Name' field: T1050, T1500.

However, with my test user, they are able to assign the role "T_50043964_5100-TEST" to a user

But i cannot see how this is possible. Am I missing something here?

Thanks,

[Former Member]

If I understand your example correctly what you are trying to do cannot be done.

The restriction with authorization wildcards must come only at the end. Example: T_50043964*

Cheers,

Ben

[Former Member]

That is quite annoying!

Thanks for the reply.