问题
While trying to understand the Authorization concept in SAP, I came across the stage where an Authorization is 'generated' resulting in a profile number.
Now I've the following questions:
Q1. What is the meaning of 'generating' an authorization. What new does the button actually do because we already have allocated an authorization object to a class. I think this only should serve the purpose of allocating this authorization to a user?
Q2. What is a profile?
Thanks!
回答1:
"Profiles" are the technical stuff that the kernel reads to actually evaluate the permissions. In The Good (?) Old Days [TM], there were only profiles, maintained manually. Roles / Activity groups were built on top of this later on, adding functionality and more settings. They consequently generate profiles from the settings assembled there. This allowed for a gradual transition from manual profiles to generated profiles / roles without throwing away the kernel and user code that was known to work. You can still see this in the technical names: PRGN = profile generator...
来源：https://stackoverflow.com/questions/12067926/what-does-the-generate-authorization-process-do-and-what-is-a-profile