Question:
Hello everybody,
I am currently working on a set of derived roles, where I would like to maintain some of the organizational levels on a field basis. For instance I would like Role XX to have rights for company code 1 and 2. For a given authorization object the role should have activity 01,02 and 03 for these company codes. My problem is, that I would like the role to have display-rights for company code 3 (controlled by the same authorization object). This can of course be maintained in the derived roles, but as soon as I make a change in the "mother"-role it causes these manual changes to dissapear.
From what I can see it is possible to create and keep these maintained values when you're not working with derived roles, and that the function overriding the maintained values for the derived roles is in fact "working as designed".
I was wondering if anybody knows a way to work around this problem?
Any help is highly appreciated (even if it is a statement saying "this is not possible" ).
Kind regards,
Christina
Answer:
As far as I know this is not possible - this is a symptom of using the derived funtionality.
As you have noticed you can protect the field from org level updates, just not cascaded changes.
Answer:
Derived won't work in this case but it sounds like you are mixing apples and oranges.
I don't know how the roles are structured in your system but why don't you define a separate display strategy? If display is separate you can reassign it since many users from different business processes only need display access to others. A properly defined display strategy will solve your immediate problem, and hopefully prevent extra maintenance/development in the future. It will also help minimize SoD conflicts.