Structural Authorization is a concept in SAP, which is applicable only to HR module for restricting access to an user based on the organizational structure. This also provides an automated integration between the PA and PD modules. This is a very powerful concept and can be used to enable a rich functionality from the security point of view.
I've applied the standard structural authorization step by step and have listed the issues that are very important to consider, before embracing this architecture. In my extensive analysis and experimentation, the standard tool can go only to an extent and need a lot of modification in the routines to manage and implement the requirements for the current project.
I'm trying to write a three series document on this.
1. The fundamentals of SAP's structural authorization : what and how
2. The fundamentals of ViSA, a custom tool built on ECC
3. Implementation of ViSA in a public sector.
Here is the part one of the series: Fundamentals of SAP structural Authorization
