RAP Global and Instance Authorization

In the ABAP RESTful Application Programming Model (RAP), global and instance authorization is a mechanism developers use to protect business objects against unauthorized write activities. Global authorization controls whether a user is generally permitted to perform a given operation (such as create, update, or delete) on a business object, while instance authorization restricts access at the level of individual entity instances. Developers model these authorization checks in the behavior definition and implement them in the behavior handler class to enforce fine-grained access control. For more details, see Modeling a Protection Against Unauthorized Write Activities.