Named Permissions and Action Permissions

Use

When you develop a new application, you must decide what parts need to be protected an how you are going to protect them. SAP NetWeaver supports the standard methods offered by Java EE, but also offers enhanced methods enabling you to determine at a granular level how you want to protect your application.

SAP provides the following standard permission classes, upon which you can build your authorization concept:

  • Named permissions

  • Action permissions

Named Permissions

Named permissions function much as permissions in Java EE. In your application you check if the user has the permission named. If the name matches, then the user has permission to execute the protected function. With named permissions, only the name of the permission is significant. The value plays no role.

Action Permissions

Use action permissions to create permissions for a number of objects for which you perform similar actions. You can then control access by the type of object and the type of action.