AW: authorization objects

[Schmidinger, Heinz (Unaxis IT BZ)]

Mahlzeit Herr Marten,
 
and back zu english;
 
to Q1 I can give you a explaination, Q2 I think I0ve not all present in =
my
head.
 
If you have a Dialog-Task, you have to assign possible users =
(m=F6gliche
Bearbeiter).
This can be done by classifying the Task as generel task so every User =
is a
possible user or moredifferent by assining HR-Organizational Objects
(PD_Org).
 
One of the Objects which are foreseen are Activity-Groups.
If you use this org-object for defining possibble users you see this
assignment in PFCG too under the Tab 'Workflow'.
 
This has no impact to the AUTHORIZATION-CHECK itself, it makes a User =
only
to a possible user  of the instanced task.
 
Which authorizations the user get from the AG deponds only of the =
content of
the AG. If there are no AObjects for WF in it, the user gets nor
authorization for processing the Task out of this AG.
 
So I use empty AG's for User-Assignment and different AG's for
'real'-Authorizations, which are maintained by the Functional(Module)
Spezialists.=20
 
Maybe it helps a little and its not to confusing.
 
Regards
 
Heinz
 
 
-----Urspr=FCngliche Nachricht-----
Von: Michael Marten [mailto:michael.marten at philips.com]
Gesendet am: Donnerstag, 13. Februar 2003 13:16
An: SAP-WUG at MITVMA.MIT.EDU
Betreff: authorization objects
 
SAP V4.6B
 
Here are some questions about workflow and an authorization concept.
 
Q1: transaction PFCG , activity groups
    There is a "workflow" tab where we could enter tasks .
    Does that mean that the authorization is assigned if someone =
executes
the correspondig task (even
    if the user account itself was not assigned)?
 
Q2: activity group SAP_BC_SRV_USER or SAP_BC_SRV_OFC_USER_AG
     This activity groups seem to contain all workflow authorizations =
for
an end user.
      Looking deeper into this group there are not too much different
authorization objects for a workflow
      (well, it contains the transaction SBWP to start the workplace).
      Does that mean that there are not many authorization settings for
the workflow inbox?
 
All books that I read contained only facile info about authorization.
Is there somewhere else more?
 
Thanx.
 
Michael Marten / Hamburg / Germany