Shulou(Shulou.com)06/01 Report--

For example, the role created in the ABAP development studi below is to implement the permission control of CDS view DEMO_CDS_AUTH_LIT_PFCG, which uses the permission object S_CARRID.

Suppose I have a requirement now: do I want to know if the user name WANGJER has display (03) permission for the field s_carrid of this permission object?

In the transaction code SU01, I can only see which PFCG roles the user WANGJER has been assigned. The permission object is not assigned directly to the user, but as an intermediate layer through the PFCG role.

You can find out which PFCG roles a specified user is assigned by looking up the table AGR_USERS.

So the requirement at the beginning of the topic translates into the question: which PFCG role assigns the permission object S_CARRID?

Use the transaction code SUIM to query the PFCG role based on the permission object:

The following 14 PFCG roles are all assigned permission object S_CARRID:

Select one of the double clicks, such as SAP_QAP_DEVELOPER:

The figure above means that if a user is assigned the PFCG role SAP_QAP_DEVELOPER, the user has the permissions of Create,Change and Display defined on the permission object S_CARRID:

For more original Jerry technical articles, please follow the official account "Wang Zixi" or scan the following QR code:

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.