Web Shop Authorizations 

Use

You use the authorization object CRM_ISA_SP to control which users can enter a particular Web shop. You maintain a value for the authorization object in role maintenance and assign it to your Web shop and also to a user to control user access to a particular Web shop. You have enter the value, maintained for the authorization object in role maintenance, in a particular Web shop to enable this function. If you do not do so the function will work not work. When you maintain the value in the Web shop the system runs a check on all users attempting to enter the Web shop. If the user has the authorization object value assigned to it the user can enter the shop, if the value is not present, the user is denied access to the Web shop.

 

Prerequisites

       1.      You have assigned the authorization object CRM_ISA_SP to the necessary authorization role in role maintenance.

In the SAP Easy Access Menu choose Architecture and Technology ® System Administration ® User Maintenance ® Role Administration ® Roles (transaction PFCG).

Select your authorization role and make sure that the authorization object CRM_ISA_SP is assigned to the role.

       2.      You have set a value for the authorization object to limit the number of Web shops it is valid for or left the value empty to enable it in all Web shops. Select the authorization object within the role and maintain a value. For more information, see Role Maintenance.

SAP delivers standard authorization roles for use in CRM E-Commerce. You have to copy and modify these roles to meet your own needs. For more information on which roles are delivered for you to modify, see Authorization Roles in CRM E-Commerce and the section User Authorization Concept below.

       3.      You have assigned the authorization role to a user. For more information, see User Authorization Concept in Authorization Concept in CRM E-Commerce.

 

Activities

You assign the authorization object value to your Web shop using the Shop Management application. In the Shop Management application, select the Web shop and enter the authorization object value in the Authorization Group field on the General Information tab page.

If you maintain a value for the authorization object and assign it to the Web shop in the Shop Management application, you must make sure the user has the same value assigned in his role.

If you maintain a value for the authorization object and do not assign it to the Web shop the system will not carry out an authorization check for on users entering the Web shop, irrespective of whether the user has the value maintained in his role or not.