Substitute Authorizations/profiles/roles

[Kisloff, Philip B]

Mark,
 
I agree with Stephan, but the flip side to your question is when custom
workflows
allow approvals (with no authorisation concept involved) and you don't =
want
all types
of workflows to be accessed by your substitute. This can be restricted =
based
on substitute profiles for workflow classes.
 
Regards
 
Phil
 
 
-----Original Message-----
From: Becker Stephan (extern)
[mailto:Stephan.Becker.ext at mchw.siemens.de]
Sent: 24 April 2002 11:01
To: SAP-WUG at MITVMA.MIT.EDU
Subject: AW: Subsitute Authoizations/profiles/roles
 
 
Mark,
 
this would go against one of the prime design principles of the SAP
authorisation concept. Authorisations are allocated to the user, and =
when
you arrange a substitution, the substitute should not have access to =
more
functions automatically, otherwise you could use that to circumvent =
explicit
assignment of authorisations. I would not recommend not to try to =
automate
this process, as you would no doubt get into trouble during an audit =
unless
you log the changes very carefully and keep a full audit trail and =
inform
people that this automatic stuff has happened and....
 
Hth,
Stephan
 
-----Urspr=FCngliche Nachricht-----
Von: mark narra [mailto:mark_narra at mail.com]
Gesendet: Dienstag, 23. April 2002 21:49
An: SAP-WUG at MITVMA.MIT.EDU
Betreff: Subsitute Authoizations/profiles/roles
 
 
WF folks,
 
When a User substitutes another user in SAPinbox/Workplace,
authorizations/roles does not seem to get substituted to the new user. =
Looks
like it will be have to manually added by the security person. Doesn't =
sound
too good.
 
We are currently maintaining roles/authorizations at user-level. Is =
there
any user-exit that we can use to do the custom stuff?
 
Suggestions appreciated.
 
Mark.
--
 
_______________________________________________
Sign-up for your own FREE Personalized E-mail at Mail.com
http://www.mail.com/?sr=3Dsignup