ABAP Keyword Documentation → ABAP - Dictionary → ABAP CDS in ABAP Dictionary → ABAP CDS - Access Control → ABAP CDS - DCL Statements → ABAP CDS - DEFINE ROLE
ABAP CDS - DEFINE ROLE, access_rules
Other versions:
7.31 | 7.40 | 7.54
Syntax Forms
1. ... conditional_rule|grant_rule
[conditional_rule|
grant_rule]
...
2. ... inherited_rule
[conditional_rule|
grant_rule]
[conditional_rule|
grant_rule]
...
Effect
Access rules that can be specified in curly brackets in the statement DEFINE ROLE to define a CDS role in CDS DCL. Each access rule defines access to a CDS entity. There are three types of access rule:
- Conditional access rules conditional_rule, which control access using access conditions
- Full access rules grant_rule that grant unrestricted access
- Obsolete inherited access rules inherited_rule applied from existing CDS roles; inheritance conditions should be used instead of inheritance rules.
Multiple access rules can be combined in a single CDS role, but an inherited access rule inherited_rule can only occur once.
The access conditions defined by the individual access rules are joined with a logical "or". In the same way, the access rules defined by different CDS roles for a CDS entity are joined by a logical "or".
Note
It is advisable to use only one access rule in a CDS role.
Continue
ABAP CDS - DEFINE ROLE, conditional_rule