Authorizations for Role Resolution

[Soady, Phil]

Hi Susan,
 
stick a dummy empty background step in between to see what happens.
WFTS.EMPTY_BACKGROUND.
This should test if WF-BACTH has authorization ok.
 
It may be a structural authorization issue.
ie not from the abap command AUTHORITY-CHECK, but from the PD
functions access when read PD objects.
 
Check in txn ooac if the structural auth check is on.
 
If it is, check table t77ua.
This has the users structural profile.
If the use is not in the table, the profile assigned to entry SAP*
applies. If SAP* is not in the table and the user is not in the table,
the have NO access to PD objects.
 
Use abap  RHUATH00 to check what objects can be accessed per user for
a given profile.
 
hth
 
 
Phil Soady
Senior Consultant
Business Technologies
SAP Australia
* : 0412 213 079
* : phil.soady at sap.com
 
 
 
 
 
-----Original Message-----
From: Susan R. Keohan [mailto:skeohan at mit.edu]
Sent: Thursday, July 03, 2003 5:58 AM
To: SAP-WUG at MITVMA.MIT.EDU
Subject: Authorizations for Role Resolution
 
 
Hello all,
 
I have a workflow that has two dialog tasks with no intervening background tasks.  When User1 executes the first task, the workflow fails on the role resolution of the second task ('5W 170 - structure 1 S 600028118 WF_ORGUS. No Agent Found.'). This role resolution uses some standard SAP functions to climb up and down the org structure.
 
The role resolution works fine when I test the role.  The workflow can process if I am the user executing the first task.  The workflow can also proceed if I execute SWPR to restart the workflow in error.
 
I had the Basis folks give User1 SAP_All and SAP_New (for a limited time!) and found that the error went away. That is, User1 executed his dialog task, and the role resolution for the second task was fine, the task was delivered to the appropriate user.  So we know that this is an authorization issue.
 
However, the question in my mind is, why would the authorizations of User1 have an impact on the role resolution of the subsequent dialog task ?  Shouldn't that role resolution be carried out under the auspices of WF-Batch ?
 
Thanks in advance,
Sue
--
Susan R. Keohan
SAP Workflow Developer
MIT Lincoln Laboratory
244 Wood Street
LI-200
Lexington, MA. 02420
781-981-3561
skeohan at mit.edu