Doubt in implementing authorization model

[Former Member]

Hi all,

We are struggling to implement an authorization model using BW7.x concept.

So far we have defined 0COSTCENTER as authorization relevant and created one authorization using RSECADMIN.

We have defined that the user XPTO only has access to Costcenter 20905400. We have created one query and created a variable of type authorization.

When the query is executed the variable is automatically filled with Costcenter 20905400 and the user can only see the values posted to Costcenter 20905400.

Nevertheless if the user, in the variable screen, removes the pre-filled variable and executes the query, no values are shown and the system tells that there are not sufficient authorizations.

Is there any way the user can left the variable blank and the system automatically returns only values for the Costcenter he has authorization?

Many thanks,

[anshu_lilhori · Accepted solution]

Hi,

check these docs on authorization:

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/c0b7acf2-6121-2e10-5591-eaec182d9...

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/9000928e-dd3d-2e10-9ca1-a00f24930...

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/101fb4f5-eb7c-2c10-5daa-b479c47f0...

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/f0f9f33c-0f17-2d10-d3a2-ae52ccd00...

Hope that helps.

Regards,

AL

[Former Member]

Hi,

Normally, when Authorization variable is used, The query checks for the authorization available for that particular USER ID and then shows the values. In the scenario that you have mentioned, the cost center values should be visible to all the users who are not restricted.

We have implemented similar authorization check on one of the queries and it works fine.

I think looping in the security team will help you as they can check and tell you what authorization object the system is checking when it is denying the access.

Following document might also be useful:

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/4753ed83-0e01-0010-e186-f98413f86...

Regards,

Saurabh