Auth_Profiles

DDL: AUTH_PROFILES SQL: AUTHPROFILES Type: view

Authorization profiles with valid restrictions on all fields

Auth_Profiles is a CDS View that provides data about "Authorization profiles with valid restrictions on all fields" in SAP S/4HANA. It reads from 3 data sources (usrbf2, Auth_Profiles_Activity, ust12) and exposes 2 fields.

Data Sources (3)

SourceAliasJoin Type
usrbf2 A from
Auth_Profiles_Activity Auth_Profiles_Activity inner
ust12 C inner

Parameters (1)

NameTypeDefault
P_User syuname

Annotations (5)

NameValueLevelField
AbapCatalog.sqlViewName AUTHPROFILES view
EndUserText.label Authorization profiles with valid restrictions on all fields view
ObjectModel.usageType.serviceQuality #P view
ClientHandling.algorithm #SESSION_VARIABLE view
AccessControl.authorizationCheck #NOT_REQUIRED view

Fields (2)

KeyFieldSource TableSource FieldDescription
Authorization_Profile usrbf2 auth
Authorization_Object usrbf2 objct
@AbapCatalog.sqlViewName: 'AUTHPROFILES'
@EndUserText.label: 'Authorization profiles with valid restrictions on all fields'
@ObjectModel.usageType.serviceQuality:  #P
@ClientHandling.algorithm: #SESSION_VARIABLE
@AccessControl.authorizationCheck: #NOT_REQUIRED
define view Auth_Profiles with parameters P_User: syuname
as select from usrbf2 as A
inner join ust12 as C
on A.auth = C.auth
and A.objct = C.objct

inner join Auth_Profiles_Activity(P_User : $parameters.P_User ) 
on A.auth = Auth_Profiles_Activity.Authorization_Profile { 
  A.auth as Authorization_Profile,
  A.objct as Authorization_Object
}
where (
  (((A.objct='S_RS_COMP' and C.objct='S_RS_COMP') or (A.objct='S_RS_COMP1' and C.objct='S_RS_COMP1')) and C.field = 'RSZCOMPTP' and (C.von = '*' or C.von = 'REP' or C.von = 'SOB'))
  or (((A.objct='S_RS_COMP' and C.objct='S_RS_COMP') or (A.objct='S_RS_COMP1' and C.objct='S_RS_COMP1')) and C.field = 'RSZCOMPID' and (C.von = '*' or C.von like '2C%'))
  or (A.objct='S_RS_COMP' and C.objct='S_RS_COMP' and C.field = 'RSINFOCUBE' and (C.von = '*' or C.von like '2C%'))
  or (A.objct='S_RS_COMP1' and C.objct='S_RS_COMP1' and C.field = 'RSZOWNER' and C.von = '*')
  //TODO: validate the below 'field' condition

  or (A.objct='SDDLVIEW' and C.objct='SDDLVIEW'))
and A.bname = $parameters.P_User group by A.auth, A.objct having count(*) >= 3;