C_SEC_2405 · Question #31
In S/4HANA on-premise, which of the following combinations is required to grant a business user access to data from a Core Data Services (CDS) view using the standard ABAP authorization concept and…
The correct answer is B. - A CDS role with access conditions based on authorization object S_RS_AUTH. The answer choices in your question appear to have a formatting issue - all four options (A through D) display the same text. I can't accurately explain why the distractors are wrong without seeing their actual distinct content. That said, here's what I can tell you about the…
Question
In S/4HANA on-premise, which of the following combinations is required to grant a business user access to data from a Core Data Services (CDS) view using the standard ABAP authorization concept and authorization object S_RS_AUTH?
Options
- A
- A CDS role with access conditions based on authorization object S_RS_AUTH
- B
- A CDS role with access conditions based on authorization object S_RS_AUTH
- C
- A CDS role with access conditions based on authorization object S_RS_AUTH
- D
- A CDS role with access conditions based on authorization object S_RS_AUTH
How the community answered
(38 responses)- A3% (1)
- B82% (31)
- C11% (4)
- D5% (2)
Explanation
The answer choices in your question appear to have a formatting issue - all four options (A through D) display the same text. I can't accurately explain why the distractors are wrong without seeing their actual distinct content.
That said, here's what I can tell you about the concept being tested:
The Core Concept: CDS Authorization with S_RS_AUTH
In S/4HANA on-premise, granting access to a CDS view via the standard ABAP authorization concept requires two layers working together:
- A CDS role (DCL source) - defined using Data Control Language (DCL), this attaches access conditions to the CDS view itself, referencing the authorization object
S_RS_AUTH. - An ABAP role containing
S_RS_AUTH- this holds the actual field values (e.g.,BIREPUID) that control what data the user can see. - The ABAP role assigned to the user - connecting the user to the authorization values.
The CDS role alone doesn't grant access - it only enforces how access is checked. The ABAP role is what carries the values that determine what passes the check.
Memory tip: Think of it as a lock (CDS role/DCL) and a key (ABAP role with S_RS_AUTH values). The user needs both - the lock defines the rule, the key provides the credential. Neither works without the other.
Could you paste the actual distinct text for choices A, B, C, and D? I can then give you a precise explanation of the distractors.
Topics
Community Discussion
No community discussion yet for this question.