Use of tokens in AMT

Question

Can anybody explain me what the tokens are in AMT and how they must be used.
Are tokens only for security on control level ?
And what are the advantages of using these?
Thanks for your help.

Answer 1

Hi Wim,
For Business Object level authorization SAP provides a so-called Token which describes how Business Object data can be accessed by the user.
Tokens are used to grant authorization for a particular class of protected Business Object regarding the standard activities read, modify, delete and create new.
Additionally you can assign Authorization Rules to a Token defining the valid scope of a Token, meaning in which scope of a business context the authorization is granted. Authorization Rules are defined based on of the Business Object Fields stored in the Application Repository.
Using Tokens with Authorization Rules offer the feature of value based authorization, meaning authorization changes depending on the values stored in the Business Object itself.
Tokens are stored in a Role which can contain many Tokens regarding many protected Business Objects.
Here is the best place to find info on this topic:
"Defining an Authorization Token"
http://help.sap.com/saphelp_crm50/helpdata/en/cb/7f023c2b6c6608e10000000a11402f/frameset.htm
Regards,
Vadim.