Symptom
A user cannot access a document despite correct access restriction; also the user is listed in Check User's Authorisation for document access.
Environment
SAP Sales Cloud
Reproducing the Issue
Prerequisite: a valid access restriction that allows a user to access the document XYZ (XYZ stands for example for an opportunity).
- Go to the Administrator workcenter.
- Click on Check User's Authorisation.
- Enter the affected user and the document XYZ.
- Check the document access.
Result: the user is listed for access; however the table they appear in is SAP Standard Determined Authorization and not Determined Authorization Details.
Cause
The table SAP Standard Determined Authorization only shows up if custom coding determines the access context.
The occurence of this section reveals that you have implemented the PDI BAdI to overwrite the SAP standard logic to determine the access groups for the document.
Resolution
Please adapt your PDI BAdI accordingly.
Keywords
access restriction, context, rule, unable to access, SAP Standard Determined Authorization , KBA , LOD-CRM-OPP , Opportunity Management , Problem