Authorization Workbench (ttams4300m000)

Use this session to analyze the authorizations of users and roles.

General

In this session you can select three kinds of views:

  • User view. View the authorization from the user perspective.
  • Role view. Show role-related authorizations.
  • Session view. Show authorizations for a certain session.

Panes

The session consists of these panes:

  • Left pane. Use this pane to make selections. If you make a selection, the results in the right and bottom pane are updated accordingly.

    To collapse or expand the left pane , double-click the vertical splitter bar.

  • Right pane. This pane shows the authorization definitions that have been specified in several authorization sessions.
  • Bottom pane. If not hidden, this pane shows the results of the right pane, using data from the Runtime Change Publishing module.

Left pane

The left pane consists of four sections:

  • View

    You can select a different view. This results in a different cross-section/perspective. This selection is the same for each selected view. You can select these views:

    • User Authorization
    • Role Authorization
    • Session Authorization.

  • Selection

    Use this group to specify the key items. All entries are mandatory. The key items are different for each view except for the Company. The company change also results in a change in all other views.

    Click View Selection to activate the results in the right panes.

  • Filter

    If the right data pane contains a lot of data, you can zoom in through the filter option. Filter options are all optional, but filters must be specified from top to bottom.

    Click Apply to activate the filters in the right pane.

  • Options

    Use the Expand options to expand or collapse tree node levels in the right pane tree. If the tree nodes are collapsed, you can also manually expand or collapse tree nodes one by one.

    Select the Authorized Sessions check box to show the bottom pane. Clear this check box, to hide the bottom pane. Click outside the dropdown box or check box to activate the option.

To store the default values in this pane, click the Save and Close button in the toolbar. Alternatively, click the options menu button on the toolbar, that is, the gears icon, and select Save Defaults.

Right pane

The right (top) pane shows the authorization definitions for the selection that you made in the selection section of the left pane.

The authorization definitions are retrieved from data in these sessions:

  • Session Authorizations (ttams4110m000)
  • Table Authorizations (ttams4111m000)
  • Table Field Authorizations (ttams4112m000)
  • Library Authorizations (ttams4113m000)

Alternatively, you can view the same authorization definitions through the Role Data (ttams4100m000) session.

Depending on the selected view, the tree content is different. In the Options section of the left pane, you can set the default tree unfolding and store this setting for the next time.

Bottom pane

In the bottom pane the results of the authorization definitions can be displayed. This results in a list of sessions with the maximum authorization. The maximum authorization is displayed for each session. The Maximum Authorization column shows the authorization that can be offered from the session perspective, and is offered from the authorization definition perspective.

The bottom pane is hidden if the Authorized Sessions check box in the left pane is cleared. If the pane is hidden, performance increases.

Beware that the content of this pane is dependent on data produced by the Runtime Change Publishing system. This system must be set up and BOD data must be generated to see results in this pane. In general, this system is implemented as a batch process that runs every night. When user or role changes are set, the BOD data generation must be executed before the result is displayed in this pane. See also the | Integration Tools > runtime Change Publishing menu.

Personalization

Next to the session authorization, indicators for personalizations are displayed. To examine personalization details, use the Session Personalizations (ttadv9100m000) session.

This list has by default some extra, hidden, columns. Use the list option icon to change the Column Personalization.

Drill through

This session only shows read-only data. To change authorization settings, you must start the appropriate session by clicking the icon in front of the grid row. The appropriate session is started modally. When the changes are confirmed and the model session is closed, click the refresh button in the toolbar to update the result in this session.

Switch views using context

The main advantage of this session is that you can quickly switch between views. When you use the Previous View selection and Next View selection buttons, it is even easier to compare authorizations.

To switch view, use the View section in the left pane.

When the first view results are displayed, you can switch views through the context of the current results. To do so, click the switch view icon, that is, the arrow on top in front of user, role, or session descriptions. The view is switched and the appropriate selection attributes are automatically specified in the selection sections in the left pane.

Toolbar

The left side of the toolbar contains these buttons:

  • Save and close button

    Closes the session and saves all selections for all views (left pane). At next startup, the session starts up in the same state as it was ended through this button.

  • Previous view selection

    Returns to the view that was selected directly before the current view.

    This action can result in these changes:

    • A change of view type, that is, user, role, or session view.
    • A change in the left pane, that is, selection, filters, options.

    A maximum of 20 levels is stored.

  • Next view selection

    Returns to the view that was selected directly before you clicked the Previous View selection button.

  • Refresh

    Refreshes all data. The session caches some data, such as users and roles. Therefore, changes in role assignments are only reflected after a refresh.

The right side of the toolbar contains these buttons:

  • Help

    Shows this page.

  • Options

    • Defaults

      Stores the selections that are made in the left pane.

    • Layout Personalization

      You can perform various personalization actions:

      • Set the filter row.
      • Change the pane size, the grid in the bottom pane, and column size.
      • Show and hide columns.

Personalization

Personalizations for grids are only implemented in the bottom pane. Filter row visibility and column personalization are saved.