Authorization areas can protect sub trees of your solution structure. An administrator can assign an authorization area to a structure element. Then only users that have an authorization for authorization object Solution Documentation
(SM_SDOC
) with this authorization area name in the field Authorization Area
(SMUDAREA
) for this authorization area are allowed to perform activities for this structure element and its subelements.
Authorization areas are defined solution-specific. An authorization area has a 30 character long technical name and a description. The default authorization area does not need to be defined. The Solution Documentation root element and all elements without assignment have the implicit authorization area assignment Default
by definition.
When no authorization areas have been assigned to the elements of a solution yet, every element has authorization area Default
. The assignment of a structure element to an authorization area is valid for all branches of a solution in which the assigned elements exists. The authorization area explicitly assigned to a structure element is valid for the whole subtree rooted by the element excluding all nested subtrees rooted by elements with own authorization area assignments. Non-structure elements always inherit the authorization area from their structure parents. The authorization area determination is branch-specific as the inheritance hierarchy is branch specific: if an element is moved, it may inherit a new authorization area from the new parent, so in this case the authorization area of an element may differ in different branches.
Maintenance of Authorization Areas
You maintain authorization areas with view cluster maintenance (transaction SM34
) for view cluster SMUD_AUTHG
. Select the solution for which you want to create authorization areas first.
Define Authorization Areas
Select in the view cluster the view Define Authorization Areas
to create a new authorization area by giving it a considerate technical name and description.
Authorization Area Assignment
Select in the view cluster the view Authorization Area Assignment
to assign an element of a solution to an authorization area. Choose the New
button to add a new entry in the detail screen of the view. Enter an authorization area ID or select it in the value help provided. Select the button Select Structure Element
. In the value help you can preselect by element type and by description.
For more information about the authorization objects SM_SDOC
(Solution Documentation
) and SM_SDOCADM
(Solution Documentation Solution Administration
), check the corresponding authorization documentation in the system.