ABAP Authorization Concept for CDS Entities

Use the statement AUTHORITY-CHECK to protect your applications.

The classical authorization concept is based on authorization objects. The authorization of a user occurs either implicitly, for example while calling a transaction, or explicitly with the statement AUTHORITY-CHECK. A user who can access a CDS entity has access to all data returned by the entity.