Switchable Authorization Check Framework Overview

The switchable authorization check framework enables developers to deliver authorization changes in the developments without disrupting the productive systems of system administrators. The system administrator can decide how and when the new authorizations are applied.

The following figure shows how a developer adds a scenario for his or her application and then creates a scenario definition. The developer transports the application and the scenario definition to the system where the system administrator creates a productive scenario from the scenario definition. In the same way an administrator can accept or modify the values for authorization objects delivered with roles, the administrator can customize how the scenario evaluates the authorization objects delivered in the scenario. The administrator can then transport the customized productive scenario to the test and productive systems.

Overview of Switchable Authorization Check Framework
Transportable and Customizable Objects in the Switchable Authorization Check Framework