Contexts for Checking Authorizations

Use

You can assign methods for checking authorizations for HCM Processes and Forms to different contexts. The following overview explains what data you can protect in which location or at what time if you use the third method of combining traditional HR authorization objects with the authorization object P_ASRCONT. For more information, see Methods for Checking Authorizations .

Features

When processes are executed or the Process Browser and the Digital Personnel File are used, the system performs authorization checks during the execution of certain functions. The functions in question are as follows:

Process runtime/execution of processes

Calling a start application

Calling a process

Calling a form

Resolution of rules for agent assignment

Calling a form from a work item

Saving data from a form to the back-end system

Approving a form

Withdrawing a process

Process Browser:

Searching for processes

Displaying the processes found

Displaying forms for processes found

Digital Personnel File

Displaying documents in the Digital Personnel File

Case Management (in this case you also use the relevant authorization objects from Case Management)

HR Administrative Services: Administrator Workbench (Transaction HRASPROCESS_UTILITY)

The following table gives you an overview of the Activities for Checking Authorizations in the various HCM Processes and Forms contexts

Activities for Checking Authorizations in the various contexts

Application/Trigger	Description	Pro-cess	Form Scenario	Attachment
Select Process	Selection of a process that can be started	S
Start Process	Start of a certain process	S	S
Processing Step	Start of a processing step from the universal worklist		P
Approval Step	Start of an approval step from the universal worklist		A
Cancellation Step	Cancellation of a process during a process step	D
Save Application Data	Saving of application data during a processing step or background step	X	X
Process Browser	Search for processes and displays of step details, forms, and attachments	R	R	R
Digital Personnel File	Display of forms and attachments		R	R
Case Management	Display and changing of process and process step properties, form data containers, and attachments	R	R	R
Administrator Workbench	Display of processes, deletion of related objects such as attachments, notes, form data containers	R, D	R

This graphic is explained in the accompanying text.

The authorization checks are not carried out if a work item is transferred or delegated to another user. The system will only run an authorization check when the new user wants to execute the work item.