Wednesday, May 25, 2011

ACE Technical details

If you apply ACE to business partners, a few tables are generally relevant:

This is the actual Access Control List. Here, all relevant business partners are linked to an ACE-group.
One business partner can be assigned to several ace-groups.
This table will generally contain many entries (at least one for every BP).

Here, rights are mapped to actor_id’s and ACE-groups.
This table will generally not contain many entries.

The CRM_ACE2_BP_UCT contains the mapping between actual USERID’s and the ACEGROUP.

Wednesday, May 18, 2011

How ACE (Access Control Engine) works

ACE (Access Control Engine) is a generic authorization mechanism in SAP CRM. In contrast to the conventional authorization in SAP CRM, ACE uses Access Control Lists instead of authorization based on object’s attributes. Whenever an object shows up in the screen (either in a search result or in an assignment block), the system checks if the object is available in the access control list (ACL) for this user, and if the display-action has been applied to the list. The same logic is applied if the user wants to change the object, but then with the change-action. Determination of the access control list can be user specific, role based or group based.

If for instance you want to grant edit-access to a group of customers only to a specific group of users, this would be possible with conventional authorization, but if you also want this group to be able to edit the contact persons of this group of customers or see the activities of this customer, this was not possible with conventional authorization. With ACE, it is.

Wednesday, May 11, 2011

Sybase Unwired Platform: As a Service or On Premise?

As shown in this image, if you want to mobilize your SAP CRM system using Sybase, quite some extra servers are involved. Depending on your requirements, you can consider implementing the SUP inside your own SAP Landscape, or you can apply for a SAAS solution through a certified SAP Hosting Partner. 

Wednesday, May 4, 2011

Influencing Recent Edits using customizing

Since CRM2007, users are able to see the recently shown objects in the lower left corner of the screen. This is known as the ‘recent edits’. The recent edits functionality is greatly appreciated by end-users.

In some cases though, the description of the object might not be what you would expect, for instance, phonecall activities (object BTOrder, type BT126_CALL) will not show a description in the recent edits, but shows the activitynumber (which seems less interesting from a user perspective).