Contexts for Checking Authorizations 

Use

You can assign methods for checking authorizations for HCM Processes and Forms to different contexts. The following overview explains what data you can protect in which location or at what time if you use the third method of combining traditional HR authorization objects with the authorization object P_ASRCONT. For more information, see Methods for Checking Authorizations.

Features

When processes are executed or the Process Browser and the Digital Personnel File are used, the system performs authorization checks during the execution of certain functions. The functions in question are as follows:

●      Process runtime/execution of processes

○       Calling a start application

■       Calling a process

■       Calling a form

○       Resolution of rules for agent assignment

○       Calling a form from a work item

○       Saving data from a form to the back-end system

○       Approving a form

○       Withdrawing a process

●      Process Browser:

○       Searching for processes

○       Displaying the processes found

○       Displaying forms for processes found

●      Digital Personnel File

○       Displaying documents in the Digital Personnel File

○       Case Management (in this case you also use the relevant authorization objects from Case Management)

●      HR Administrative Services: Administrator Workbench (Transaction HRASPROCESS_UTILITY)

The following table gives you an overview of the Activities for Checking Authorizations in the various HCM Processes and Forms contexts

Activities for Checking Authorizations in the various contexts

Application/Trigger	Description	Pro-cess	Form Scenario	Attachment
Select Process	Selection of a process that can be started	S
Start Process	Start of a certain process	S	S
Processing Step	Start of a processing step from the universal worklist		P
Approval Step	Start of an approval step from the universal worklist		A
Cancellation Step	Cancellation of a process during a process step	D
Save Application Data	Saving of application data during a processing step or background step	X	X
Process Browser	Search for processes and displays of step details, forms, and attachments	R	R	R
Digital Personnel File	Display of forms and attachments		R	R
Case Management	Display and changing of process and process step properties, form data containers, and attachments	R	R	R
Administrator Workbench	Display of processes, deletion of related objects such as attachments, notes, form data containers	R, D	R

The authorization checks are not carried out if a work item is transferred or delegated to another user. The system will only run an authorization check when the new user wants to execute the work item.