BW Upgrade Authorization Solution(转帖)

近期再做BW升级专案（BW3.5 To BI7.0.1），以下为权限这块移植时记录，与大家分享下。

BW升级前(Planning)：BW3.5中
1.   取消在授权中未使用InfoObjcet的Authorization relevant.
2.   别删除无用的Job Roles.
3.   识别删除无用的Authorization Object.
4.   识别删除无用的User ID.

BW升级后(Migration)：BI 7.0中
1.  使用T-code RSCUSTV23 Change to new authorization concept.
2.  激活所有Business Content与权限相关的InfoProvider.
       InfoObjects: 0TCA* (and 0TCT* if not done already)
       InfoCubes: 0TCA*
3.  Mark并激活Business Content InfoObjcets Authorization relevant.
      0TCAACTVT
      0TCAIPROV
      0TCAVALID
      0TCAKYFNM(可选 ，用于Key Figure管控)
4.  使用ABAP program RSEC_MIGRATION移植.
   (该动作能完成80%的权限移植，其中不包含层级Customer-exit variables for 0TCTAUTHH，余下部分需视实际状况手工调整).
5.  使用T-code RSUDO检查Query报表

附BI 新增Authorization Object：
Working with the Data Warehousing
S_RS_DS: Authorizations for working with the DataSource 
S_RS_ISNEW: Authorizations for working with new InfoSources 
S_RS_DTP: Authorizations for working with the data transfer process and its 
S_RS_TR: Authorizations for working with transformation rules and their
S_RS_CTT: Authorizations for working with currency translation types
S_RS_UOM: Authorizations for working with quantity conversion types
S_RS_THJT: Authorizations for working with key date derivation types
S_RS_PLENQ: Authorizations for maintaining or displaying the lock settings
S_RS_RST: Authorization object for the RS trace tool
S_RS_PC: Authorizations for working with process chains
S_RS_OHDEST: Open Hub Destination
S_DEVELOP: Display and change of routines
Working in the Business Explorer:
S_RS_DAS: Authorizations for working with Data Access Services
S_RS_BTMP: Authorizations for working with BEx Web templates
S_RS_BEXTX: Authorizations for the maintenance of BEx texts
S_RSEC: Authorization for assignment and administration of analysis authorizations
S_RS_AUTH: Authorization object to include analysis authorizations in roles

BW至BI发现变化的Authorization Object S_RS_ADMWB:
新增 CONT_ACT：Installing Business Content
        USE_DND：Drag & Drop to InfoAreas and application components
        CNG_RUN：Attribute change run