Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

PA20 Authorisation conflicts

Former Member
0 Kudos
95

Hi

my user has a role that gives access to PA20, display IT 0024 on all EG and ES also

She now needs an additional role with more access that is although restricted to certain EG and ES. I would have expected that full access overrides the limited role but in fact the opposite happens

Once she gets the additional role, she cannot display qualifications on an Employee which is not in the group allowed by this new role

Is this correct? What can I do to fix my problem?

Thank you

Nadia

5 REPLIES 5

RainerKunert
Active Participant
0 Kudos
46

Hi,

did you try SU53? What is the missing authorization?

Regards.

0 Kudos
46

Hi

I did try su53 and nothing comes out! First time just P_ORGINCON with R, no other values

Second time, authoris successful

0 Kudos
46

Since you are using the context sensitive autrhoization object, I would imagine you need to look at the contexts? I believe it is P_ORGIN (not using context) that will cause the most open access to override the others.

0 Kudos
46

Thanks for the answers. I have found the cause, nothing to do with std objects. A BADI table implemented a while ago here is causing conflicts...

Nadia

0 Kudos
46

I am facing the same problem.

Do you remember the BADI name or how I can find it in the system?

Thanks.