SAP Business One Notes

1083100 - Group authorization not updated with sub item authorization Version 3 Validity: 24.04.2009 - active Language English

Symptom
When changing the authorization of specific item within the Authorization tree (Administration -> System Initialization -> Authorizations -> General Authorizations), while all other items in the same group and the same level have the same authorization, and this item is grouped by a parent article for which there is no form in the application, the authorization assigned to the parent article is not updated to 'Various Authorizations'. For example: specific user has 'No Authorization' for the entire Setup section. If a super user grants this user 'Full Authorization' for the 'General' group under 'Setup', the value that appears in 'Setup' is 'No Authorization' instead of 'Various Authorizations'.

Cause
FAQ

Solution
A parent article in the authorization tree is an authorization that has at least one child authorization below it (for example: 'Purchase Order' authorization is a parent article as it has the child authorization 'Split Purchase Order' below it). The following behavior applies when changing authorizations in SAP Business One:
l

When the authorization of a parent article is changed (for example from 'No Authorization' to 'Full Authorization'), the change is applied automatically on all the child authorizations below it.

(For example: if 'Purchase Order' is changed from 'No Authorization' to 'Full Authorization', the child authorization 'Split Purchase Order' becomes 'Full Authorization' as well.)
l

In case the parent article is changed to 'Read Only' and one or more of the child authorizations do not include the 'Read Only' option, this child authorization is set with the value 'No Authorization'. When changing an authorization that has a parent article, and that parent article represents an application window (for example: the authorization 'Business Partner Master Data' under 'Business Partners' in the Authorizations tree), the parent article is not influenced, and remains with the same authorization it used to have before the child authorization was changed. When changing an authorization that has a parent article, and that parent article represents a menu entry in SAP Business One but with no application window (for example: 'Setup', under 'Administration' in the Authorizations tree) the following behavior applies:

If after the change of the child authorization, the values of the child authorizations below the specific parent article vary (for example: one child authorization is set to 'No Authorization' and the other is set to 'Full Authorization'), the parent article is set with the value 'Various Authorizations'. If after the change of the child authorization, all of the child authorizations of a specific parent article are set to the same value, the parent article is set to that value as well.

(For example: two child authorizations, one is set to 'No Authorization' and one is set to 'Full Authorization'. The one with 'No Authorization' is changed to 'Full Authorization'. As a result, the parent article is set to 'Full Authorization' as well). As of SAP Business One 2007 A patch August the values in General Authorization window are updated according to the behavior described above.

Other terms
Authorizations, authorization levels, authorization hierarchy, SAP Business One

Header Data
Released On 24.04.2009 06:50:46 Release Status Released for Customer Component SBO-ADM-INI-AUT Authorizations Priority Recommendations/additional info

Category

FAQ

References
This document refers to:
SAP Business One Notes 1083291 Overview Note SAP Business One Version 2007 A PL 06

This document is referenced by:

SAP Business One Notes (1) 1083291 Overview Note SAP Business One Version 2007 A PL 06

Validity
Software Component Version SAP BUSINESS ONE 2007 A 2007 B