How to reuse authorization object (S_WFAR_OBJ) in a user role?

[mario_fliegner]

I've a requirement to restrict access to documents of a particular Archivelink content repository for some users. For a defined content repository and a specified document type, the user should only have read permissions. He should not be able to upload any documents to that content repository. However, the correct existing authorization object for that is S_WFAR_OBJ.

My approach was:
1) Create a new role and add the auth object manually in the "Authorizations" section. I've done it with auth object "S_TCODE" and "S_WFAR_OBJ".
2) Generate the profile and assign it to a user.

Unfortunately, this seems to be the wrong way. It looks like it has no effect at all. The user can't even access the entered transaction in TCD of S_TCODE which leads me to think that this authorizations are not evaluated?

What is the correct ways to reuse S_WFAR_OBJ for a role?
Thanks!