Managing Permissions 

Use

You can assign different view permission levels to the individual functions and callable objects of the design time (including the GP User design time). This allows you to better adjust the level of complexity in the design time to the requirements and the knowledge of the users.

The permission levels you assign here correspond to special portal roles specific to the design time, which are granted in the user administration area of the SAP NetWeaver Portal.

Roles for the Design Time

Role	Technical Name in the Portal	Permission Level
GP Basic User	com.sap.caf.eu.gp.roles.dt.basic	basic
GP Advanced User	com.sap.caf.eu.gp.roles.dt.advanced	advanced
GP Expert User	com.sap.caf.eu.gp.roles.dt.expert	expert

Users who are assigned the GP Basic User portal role can only see the functions and callable objects on the basic permission level. Users who have the GP Expert User portal role, however, can see all elements, that is, all elements on the basic, advanced, and expert levels.

More information: Setting Up Portal Roles

The settings you make using the Manage Permissions function affect both the regular design time and the simplified design time version called the GP User design time.

More information: Modeling and Configuring Workflows

Prerequisites

Before you can grant permission levels, you must assign the above roles to the users.

...

       1.      In the portal, choose User Administration → Identity Management.

       2.      Use the search function to select a user.

       3.      Choose Modify and assign the appropriate roles to the user. Always use the technical role name to select the role.

Procedure

Assigning Permissions for Functions

The Functions tab page lists all functions of the design time, which you can filter by Group or Permission.

...

       1.      Open the Functions tab page.

¡        Optional: From the Group Filter dropdown box, select a group to display only functions belonging to the group.

Some of the major function groups are:

§         Action Design Time

■       Block Design Time

■       Process Design Time

■       Callable Object Design Time

○       Optional: From the Permission Filter dropdown box, select a permission level to display only functions at this level. The available options are:

§         basic

■       advanced

■       expert

       2.      Once the filter narrows the number of functions displayed, assign permissions to the required functions.

                            a.      From the dropdown box in the Required Permission column, select a permission level.

                            b.      Choose Save.

Assigning Permissions for Callable Objects

The Callable Objects tab page lists all callable object types of the design time, organized in categories. For each callable object type, you can view the currently assigned permission level.

...

       1.      Expand the relevant category to locate the callable object type for which you want to set a permission level.

       2.      From the Required Permission dropdown box, select the permission level.

       3.      Choose Save.

Ensure that there are not too many callable object types at the basic permission level. You should really reserve this level for the simple types, such as the Web Pages type. This avoids unnecessary complexity and makes life a lot easier for the users of the simplified GP User design time.