Question:
Does anyone know why this would happen?
I have a user with access problems. Everything looks OK with the ID. Access is identical to another user who has no access problems. I delete the problematic account, and recreate it by copying the good account to it - using the same ID. Access is still identical, and still there are problems. However, if I copy the problematic account to another ID, and let the user use this new ID there are no problems. So the problem seems to be related to the ID name.
Has anyone ever seen this, have any ideas about the cause of this or how to fix it without recreating an account under a different name?
Thanks
Answer:
I have seen it. There are a few places in SAP where access is defined in tables outside the authorization concept. Also HR structural authorizations can lead to this sort of observation. Please be more specific about the nature of the access problems.
Answer:
Initially it smelt like buffering, but I agree with guest, it would depend on the nature of the access in question. Tables (and files) can represent extentions of program logic and can also be auth concept extentions. As this ID cannot do something by virtue of itīs sy-uname, but all others tried / created / copied can, it may well even be a negative list, or alternately the user ID in question is a special symbolic one?
Tarr
Answer:
Thanks Guest & Tarr.
No structural authorizations, and ID is not special or symbolic. The user is going through the portal to access MSS type info, so an evaluation path is being used to determine which employees the user can see. The user could see her employees through all iviews but the one accessing info type 0025 for appraisals. The strange thing is that all the R/3 access for all the iviews is in one role, so it's as if for that one ID name, part of the role was missing.