Authorization Concept in SAP Retail Store
You use the following authorization objects to determine the stores in which a user can log on to SAP Retail Store and the IACs and reports the user is allowed to run.
determines the store(s) in which a user can log on.
Name of the information structure: * (as desired)
Site: R310, R320
contains all transaction codes in the IACs that the user is allowed to start (including WSGM for the full menu). The system only provides links in the full menu for these IACs. Exceptions: The links to the mail function (BWSP) and recording of working time (WSHT) are always active.
The transaction codes are usually always the same as the service names. Exceptions: Full menu (WSGM), Product Catalog (WW10), Display Site (WOSW).
Transaction code: BWSP, WSAU, WSGM, WSSW, WSTA, WSTE, WW10
Before a user can display a report using web reporting, in the attributes of the report the Authorization group field must have a value for which the user has a SUBMIT authorization (see the IMG).
You use report RSCSAUTH to maintain authorization groups for reports (RMCW*, RSTWBFAF, RSTWBFLI, RM06EM00, RM06EN00, RWBEST01). For standard analyses (RMCW*), you have to set the authorization group to SWANALYS. On the full menu, the system only displays links for those reports for which the user has authorization for the authorization group.
Standard analyses are a special case: The user can branch from the full menu to the reporting tree RSW1 containing the individual reports. The system displays links for those reports for which the user has authorization for SWANALYS.
ABAP program user action: Execute ABAP program:
ABAP program authorization group: SWANALYS, SWPURCH
This list only includes authorization checks specifically required for the full menu and web reporting. The individual IACs and reports may run other authorization checks specific to the applications.