使用Authorization scope对SAP CRM附件模型进行权限控制
The attachment authorization control could be implemented with the help of authorization scope.
When you create an attachment via the Attachment button provided in attachment assignment block, you could also assign a given authorization scope for it.
Once the scope is maintained and the attachment is saved, it could never be changed any more.
The possible values of authorization scope could be maintained via customizing SPRO->Customer Relationship Management->Transactions->Basic settings->Define Authorization scope for Attachments.
For authorization domain, you should use exactly the same spelling as “ATTACHMENT”, as is defined in constant CL_CRM_SFW_ITSM_SWITCH_CHECK=>gc_auth_domain. And just use SAP predefined class CL_CRM_AUTH_SCOPE_STATIC_CHK.
Then you can maintain the authorization scope values:
In the runtime, the authorization domain “ATTACHMENT” together with the authorization scope of current attachment will be evaluated by the view controller of attachment assignment block view: if authorization check fails for current user, the attachment being evaluated will not appear in the attachment assignment block.
The authorization check is done via check against authorization object CRM_AUTHSC:
if you need to view what authorization is granted to your user, you can execute report RSUSR070, specify Authorization Object as CRM_AUTHSC:
The report result shows that authorization is included in four roles, double click one of them:
click “Authorizations” tab and click display button:
Use search function:
The result indicates that my user in our dev system has authorization to create, display, change and delete on attachments belonging to any authorization domain & scope.
要获取更多Jerry的原创文章,请关注公众号"汪子熙":
相关文章
- 149. SAP UI5 Table 控件数据进行 Excel 导出时如何进行格式控制
- SAP UI5 Table 控件数据进行 Excel 导出时如何进行格式控制
- SAP UI5 FlexibleColumnLayout 控件介绍
- SAP UI5 current language语言的决定逻辑和优先级
- SAP ABAP 系统进行 client 拷贝时遇到的 63999 table too wide during client copy 错误消息
- SAP CRM WebClient UI Text 可编辑与否的控制逻辑
- SAP CRM文本配置里的Continue标签,到底控制了什么行为
- SAP CRM的状态管理和权限控制的集成
- SAP CRM页面assignment block动态显示与否的控制逻辑
- 如何安装指定版本的 SAP Spartacus
- SAP Spartacus的登录页面的用户名显示逻辑
- SAP Spartacus b2b table,通过listService的table type字段来控制要加载的数据类型
- SAP Spartacus 当购物车里添加的商品个数过多后引起的性能问题以及解决方案
- SAP Hybris Commerce Cloud Accelerator Storefront 在 Eclipse 中的调试
- SAP HANA 错误消息 SYS_XSA authentication failed SQLSTATE - 28000
- SAP ABAP Fiori Launchpad role based page - cached_sap_menu - 基于角色的页面显示原理
- SAP Gateway 在开发系统和生产系统上的缓存控制