Role Maintenance
You can define roles for Case Management, to which you then assign authorizations (transaction PFGC). SAP supplies two example roles:
· SAP_BC_CM_USER
This role contains all authorization objects that are relevant for using Case Management.
· SAP_BC_CM_ADMINISTRATOR
This role contains all authorization objects that are relevant for the use, administration, and Customizing of Case Management.
The authorization
objects that are specific to Case Management are documented below. In addition
to these, you also require the Records Management authorization objects. These
are also included in the example roles. For a description of the Records
Management authorization objects, see the following sections of the Records
Management documentation:
The Authorization
Concept for Working with Records Management (and subsequent sections) and
The
Authorization Concept for Customizing.
This authorization object refers to cases. It has the following authorization fields:
· CASETYPE: Technical name of a case type
· SCMG_ACT: Number of an activity
· SCMG_KEY: Key for the authorization check
The key for the authorization check is not stored in the case, but rather a new one is created each time the authorization check is run. It is a user exit. In this field, you can enter a current value for a field of an application. To use the user exit, you need to implement the BAdI SCMG_AUTHORITY_S (method DETERMINE_KEY). If the BAdI is not implemented, this field is not checked.
· SCMG_LVL: Values of the attribute Authorization Level
You must have previously specified the values that you enter here in the IMG activity Create Values for Attribute ‘Authorization Level’. At runtime, the system checks whether the user has authorization for the authorization level currently entered in the case. If the user does not have the correct authorization level, they cannot execute the activity.
· SCMG_ROLE: Role of the user in relation to the current object
You can enter the value P (Processor), or R (Responsible). When processing a case, each user occupies a particular role: The user is the Processor when he or she is currently scheduled as the processor of the case. The user is the Responsible if his or her user name is currently entered as the attribute Responsible. At runtime, the system checks which of these two roles the processor of a case currently has. If the user does not have the authorization for this role, they cannot execute the activity. In other applications, additional values may be used. To assign authorizations for users who do not have a particular role for the object (case), enter the value * for this field.
Note on the scheduled
processor:
In the IMG activities Create Function Profile and Define Case Types, you determine whether or not you want to use the process route. If you use the process route, the scheduled processor is the user who is entered in the next process route item, and has the work item for processing the case in their inbox. If you do not use the process route, the scheduled processor is the user who is currently entered in the attribute PROCESSOR.
· SPS_ID: ID of an element type for cases
This authorization object refers to the attributes of a case. It has the following authorization fields:
· ACTVT: Number of an activity
· CASETYPE: Technical name of a case type
· SCMG_FIELD: Technical name of an attribute of the case
When the case is displayed, the user only sees the attributes for which he or she has authorization.
· SCMG_ROLE: Role of the user in relation to the current object (see above)
· SPS_ID: ID of an element type for cases
This authorization object refers to the status of a case.
· ACTVT: Number of an activity
· CASETYPE: Technical name of a case type
· ORDER_NO: Number of the status
· SPS_ID: ID of an element type for cases
This authorization object refers to case notes.
· ACTVT: Number of an activity
· CASETYPE: Technical name of a case type
· SPS_ID: ID of an element type for case notes
· TEXTID: Text ID
The values you enter here must previously have been specified in the IMG activity Set Text IDs.