Complex authorizations

[Former Member]

Hi,

I'm having the following problem with authorizations:

I have one authorization object on e.g. 2 characteristics (0SALESORG, and 0DISTR_CHAN).

A specific user has 2 tasks in the organisation. He is responsible for:

• Distribution Channel 'A' for all salesorgs in Europe

• All distribution channels for sales org NL

I gave him authorization for:

• 0DISTR_CHAN 'A', 0SALESORG: 'EU*'

• 0DISTR_CHAN '*', 0SALESORG: 'EUNL'

This is a simplification of my actual problem, but describing the essence of the problem

Now, the user can run a specific query for both combinations. When he start the query, the variables are filled automatically with 0DISTR_CHAN: '', 0SALESORG 'EU'. When executing the query, the pop up appears: 'No Authorization'. This is correct as the user may not see everything for these combinations.

My question is: how can we make this user friendly.

The following options were mentioned by my team, but I don't like them:

1. Create 2 user IDs for the user. One for task 1 and a second one for the second task. Logging on with the correct user ID will use the correct profile.

2. Create 2 authorization object, two multiproviders, and two reports. When accessing report 1 only one authorization object is checked, and only one set of values is used for authorization.

Are there any other solutions, like generating a pop-up where a user can select which profile he wants to use when he executes a report?

Any other ideas?

Kind regards,

Frank de Vleeschauwer

[Former Member]

Hi Aswin,

I am around this forum.Since i got registered as a customer my old points got transferred to my new userID.

As you suggest it all depend on how much complex scenario you want to implement.In my case we have 5 levels of security layer and we developed a security model and implemented with user Exit.

Thank you

Arun