General
As of BlueWorx release SP6 you can control access and edit rights within the Administration application. This means, for example, you can elect to provide access to the admin app to personnel who might maintain the inspection templates, and check for inspection processing, without also granting them access to core admin, role or user settings.
Preparation
The following steps must be undertaken prior to activation of the authorisation.
SAP Authorization Objects
A number of authorisation objects have been created for use within the app. These must be imported separately from the package. These objects are referenced in the authorization checks within the administration application. They allow two functions:
1 - Maintain (Add/ Change/ Delete/ View). In the application this controls the enablement of the edit/ save/ add/ delete buttons (as appropriate). More importantly, even if these are active (for example a clever user editing the source of the page), the checks are applied in the SAP ABAP class methods on action.
3 - View. In the application this controls the main tiles, granting or denying access to the underlying pages. So, for example, a user might be allowed to see the details of the core settings, but not update them, by being given 3 and not 1 access.
The authorisation objects provided are as follows, these must be maintained and assigned in your SAP ECC system and not, if using a split implementation, in your SAP Gateway system.
| Object | Activity 01 - Add/ Create | Activity - 03 Display | Note |
|---|---|---|---|
| Administration | |||
| ZBWXAC - Admin Settings and Crew | X | X | |
| ZBXWAL - Licenses | X | X | |
| ZBWXAPR - User Profiles | X | X | |
| ZBWXUS - Users | X | X | When administering BlueWorx Users the system also checks licenses. This means that any profiles for ZBWXUS, Activity 01 must have ZBWXAL Activity 03 to work. It makes sense that users given either 01 or 03 access for this object also get 03 access to ZBWXAPR and ZBWXUSERLOG as they can navigate to the Profile Detail and User Logs from the User Detail page. |
| ZBWXMATPRO - Material Profile | X | X | |
| ZBWXTLPRO - Task List profile | X | X | |
| ZBWXEQPRO - Equipment create profile | X | X | |
| ZBWXEQAPPR - Create Equipment | X | X | There are two additional authorization fields in this object. SWERK - Maintenance plants ZEQART - Technical Objects. These can be used to further refine which administrator can approve which Equipment Create Requests. |
| ZBWXINT - Inspection Templates | X | X | |
| ZBWXMAPS - Maps | X | X | |
| ZBWXTRANS - Translations | X | X | |
| Monitoring | |||
| ZBWXUSRLOG - User Logs | X | ||
| ZBWXORDLOG - Order Logs | X | ||
| ZBWXINSLOG - Inspection Log | X | ||
| ZBWXMATLOG - Material Log | X | ||
| ZBWXTRLOG - Transaction Log | X | New to SP10 | |
SAP Authorization Profiles
A number of templated authorisation profiles have been created. These must be imported and then applied as appropriate to BlueWorx administrators. Alternatively you can create your own roles and add the appropriate auth objects.
Activation
To activate the of the authorisation is done via the Admin Settings page, Authorizations Tab.
Warning: Ensure that you have the appropriate authorisation profiles (with objects) assigned before you activate, otherwise you will be locked out.
