SAP CDS DCL ROLE GRANT RULE



Get Example source ABAP code based on a different SAP table
  


• GRANT SELECT ON ABAP_CDS_DEFINE_ROLE

ABAP_CDS_DCL - DEFINE ROLE, grant_rule

ABAP_SYNTAX
GRANT SELECT ON cds_entity $[REDEFINITION$];

What does it do?
Full access rule in the statement DEFINE ROLE in CDS DCL. A full access rule GRANT SELECT ON without the addition WHERE provides access to a CDS entity cds_entity without conditions. If cds_entity is specified, the same applies as for a conditional access rule.
The addition REDEFINITION prevents further REDEFINITION rules from being created for the same CDS entity and letting their activation fail.



Latest notes:

For a CDS entity, a full access rule has the same effect as when there is no role for the CDS entity or when CDS access control is forbidden for this CDS entity by using the annotation @AccessControl.authorizationCheck:#NOT_ALLOWED or by using $[WITH$] PRIVILEGED ACCESS in AB-SQL when the entity is accessed.
SAP does not deliver any CDS roles with full access rules. Partners and customers can use full access rules to override roles supplied by SAP.
NON_V5_HINTS
ABAP_HINT_END

ABAP_EXAMPLE_VX5
The following CDS role specifies that all users can access the CDS view entity DEMO_CDS_AUTH_FULLACCESS without access conditions:
DCLS DEMO_CDS_ROLE_FULLACCESS
ABAP_EXAMPLE_END