Authorization 2004S

Question

Hello,
I tried to develop authorizational object in 2004S just like 3.5. Using transaction RSSM it doesn't work. Therefore you have to use transaction RSECADMIN. The client wants to have a simple authorization concept. E.g. User1 x is only allowed to look at 0Fund 1000 and User2 0FUND 2000. We have done all the necessary work that be done if you look at the document  http://asug.prod.web.sba.com/client_files/Calendar/Upload/Analysis%20Authorizations_Amelia_Lo.pdf
In 3.5 you could use transaction SE38 using PFCG_ORGFIELD_CREATE to add organisational levels in transaction PFCG. If you make use of derived roles this is necessary. In transaction  RSECADMIN it works differently and using transaction se38 is not possible.
My question is what are the necessary settings ( OBJECT in the role) and how can I make different roles with only a different 0FUND authorisation (organisational level)
Kind regard
Bart

Answer 1

The documentation has been read by me en there are 3 documents that I found on the internet, But none of them solved my problem. Actually there are 2 problems. How can I make a motherrole with derived roles beneath that have different values in the authorization field objects. And why is there no security if you start the portal with limited authorization.  In my query I made an authorization variable. Transaction Iused are RSECADMIN, PFCG, RSA1, query designer
Kind regards,
Bart