Clarification Please: Objects in user buffer

Question: Hi Guys,

I'd like some clarification as to how this works please. Let me set it up for you:
There are 2 of the same objects in their respective profile (not roles).
They allow access to 2 different fund numbers.
In the one object Activity to purchase on that fund is selected.
In the second object Activity to Only display is selected.

Because of the user buffer loading all auths, which I know doesn;t matter in which profiles a object is. Would it allow this user access to purchase on both funds or just the one where the Activity to purchase is selected?

Thanks in advance,
Jaynick
_________________
SAP Rules!!!

Answer:
Hi Guys,

I'd like some clarification as to how this works please. Let me set it up for you:
There are 2 of the same objects in their respective profile (not roles).
They allow access to 2 different fund numbers.
In the one object Activity to purchase on that fund is selected.
In the second object Activity to Only display is selected.

Because of the user buffer loading all auths, which I know doesn;t matter in which profiles a object is. Would it allow this user access to purchase on both funds or just the one where the Activity to purchase is selected?

Thanks in advance,
Jaynick
Just the one where the Activity to purchase is selected

Answer:
Thanks for the clarification Al.
_________________
SAP Rules!!!

Answer:
Hi All,

This is one of my old threads but would like a quick answer to this issue please.

I understand that SAP works the way Al. described, I'd just like to know did R/3 always work this way or was there a time when R/3 would have allowed the ability to purchase on all funds?

This will settle a little office debate we have

Many thanks,
Jaynick
_________________
SAP Rules!!!

Answer:
SAP has ALWAYS ( at least since 2.2) evaluated the VALUE SET as you specify in the authorizations. It does not pick and choose avtivity and other fields from different authorizations to satisfy the access requirments.

If the user has 01 for 001 in one authorizatioin and 03 for 999 in another authoriaztion and no other authorization that would override this, the user cannot 01 for 999.

Answer:
Thanks a mil John, thats what I thought. I think what led to this was our authorisations were all over the place which is what caused our previous Authorisation team to have the wrong end of the stick.