PA20 Authorisation conflicts

[Former Member]

Hi

my user has a role that gives access to PA20, display IT 0024 on all EG and ES also

She now needs an additional role with more access that is although restricted to certain EG and ES. I would have expected that full access overrides the limited role but in fact the opposite happens

Once she gets the additional role, she cannot display qualifications on an Employee which is not in the group allowed by this new role

Is this correct? What can I do to fix my problem?

Thank you

Nadia

[RainerKunert]

Hi,

did you try SU53? What is the missing authorization?

Regards.

[Former Member]

Hi

I did try su53 and nothing comes out! First time just P_ORGINCON with R, no other values

Second time, authoris successful

[Former Member]

Since you are using the context sensitive autrhoization object, I would imagine you need to look at the contexts? I believe it is P_ORGIN (not using context) that will cause the most open access to override the others.

[Former Member]

Thanks for the answers. I have found the cause, nothing to do with std objects. A BADI table implemented a while ago here is causing conflicts...

Nadia

[Former Member]

I am facing the same problem.

Do you remember the BADI name or how I can find it in the system?

Thanks.