/* TARGET OBJECT : access control ZZR_CHANGEAPPROVAL000 (generated 2026-09-15)
   abap: URI     : abap:/repotree-v1/0M7DEJI/System%20Library/ZLOCAL/ZARENA_PLM/Core%20Data%20Services/Access%20Controls/ZZR_CHANGEAPPROVAL000/zzr_changeapproval000.dcls.acds
   ACTION        : replace entire content, then activate.
   Full access rule: read access is governed by the IAM app / business catalog (ADR-002); SAP delivers no full-access
   roles but customers may use them [source: abap-docs /abap-docs-cloud/ABENCDS_DCL_ROLE_GRANT_RULE, verified 2026-09-15].
   @MappingRole: true assigns the role to every user [source: abap-docs /abap-platform-rap-opensap/week2/unit7, verified 2026-09-15].
   Tighten later with a custom authorization object + pfcg_auth condition if per-user data restrictions are needed. */
@EndUserText.label: 'Access control for ZZR_CHANGEAPPROVAL000'
@MappingRole: true
define role ZZR_CHANGEAPPROVAL000 {
  grant select on ZZR_CHANGEAPPROVAL000;
}