alexzandClaude Opus 5
468729eb4e
Working-tree state as of 2026-09-29, uncommitted since the initial "upload current sources" commit: - docs/handover/rap/: renamed the 11 generator-suffixed sources (zz*000) to the clean object names built on the tenant, plus the A2X leg and parameter-entity edits. - app/: manifest, annotations, i18n, mock data and local/mock ui5 configs updated to the live service shape. - PRD.md, CHANGELOG.md, KNOWLEDGE.md: build record through 2026-09-19, including the rejected reentrance-ticket path. - tools/adt-reentrance-login/: retained login helper (new). - docs/v2/zui_arena_change_appr_o4.metadata.xml: captured live $metadata (new). - Dropped a stray 0.3GB-class Eclipse installer that the initial commit had tracked under a URL-mangled filename, and the machine-specific 0M7DEJI.code-workspace. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
14 lines
1.0 KiB
Plaintext
14 lines
1.0 KiB
Plaintext
/* TARGET OBJECT : access control ZR_CHANGEAPPROVAL - README step U10, UI leg
|
|
abap: URI : abap:/repotree-v1/0M7DEJI/System%20Library/ZLOCAL/ZARENA_PLM/Core%20Data%20Services/Access%20Controls/ZR_CHANGEAPPROVAL/zr_changeapproval.dcls.acds
|
|
ACTION : create empty via ADT MCP (objectType DCLS/DL, README U10), replace entire content, save, then activate
|
|
(view ZR_CHANGEAPPROVAL must be active).
|
|
Full access rule: read access is governed by the IAM app / business catalog (ADR-002); SAP delivers no full-access
|
|
roles but customers may use them [source: abap-docs /abap-docs-cloud/ABENCDS_DCL_ROLE_GRANT_RULE, verified 2026-09-15].
|
|
@MappingRole: true assigns the role to every user [source: abap-docs /abap-platform-rap-opensap/week2/unit7, verified 2026-09-15].
|
|
Tighten later with a custom authorization object + pfcg_auth condition if per-user data restrictions are needed. */
|
|
@EndUserText.label: 'Access control for ZR_CHANGEAPPROVAL'
|
|
@MappingRole: true
|
|
define role ZR_CHANGEAPPROVAL {
|
|
grant select on ZR_CHANGEAPPROVAL;
|
|
}
|