How To Fix ACM_SYNTAX142 - Redundancy in ASPECT PFCG_AUTH: &1; see long text

SAP Error Message - Details

• Message type: E = Error

• Message class: ACM_SYNTAX - ACM: DCL Syntax Error Messages

• Message number: 142

• Message text: Redundancy in ASPECT PFCG_AUTH: &1; see long text

What causes this issue?

Conditions of type ASPECT PFCG_AUTH retrieve role data from the
classical authorizations (PFCG) and include them into the SQL statement
which is processed by the database. As this data can be quite large (for
example many single values in authorization roles), superfluous ASPECT
PFCG_AUTH conditions should be avoided.
To have a measure for redundancy, we counted the total number of such
statements in this access control (including those inherited from other
access controls by the INHERIT or INHERITING CONDITIONS FROM ENTITY
statements, as they are as relevant for the database performance as
statements from the access control itself) and divided it by the number
of distinct statements.
The result is larger than the threshold value of 1.5 which triggers this
warning.
The concrete values here are (<Redundancy> = <(><<)>Total number> / <(>
<<)>Distinct number>, #1: <(><<)>Maximum frequency>): &V1&.
One of the most redundant ASPECT PFCG_AUTH statements is as follows:
&V2&&V3&&V4&
The statement above may be truncated.

System Response

This message is a warning.

How to fix this error?

Try to reformulate the access control conditions to minimize redundancy.

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

<ZH>Example</>
This access control has a redundancy factor of 2:
GRANT SELECT ON ENTITY WHERE ( F ) = ASPECT PFCG_AUTH( S_OBJECT, FIELD )
AND G = 1 OR ( F ) = ASPECT PFCG_AUTH( S_OBJECT, FIELD ) AND G = 2;
By using parentheses, it can be improved to have redundancy factor 1:
GRANT SELECT ON ENTITY WHERE ( F ) = ASPECT PFCG_AUTH( S_OBJECT, FIELD )
AND ( G = 1 OR G = 2 );

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message ACM_SYNTAX142 - Redundancy in ASPECT PFCG_AUTH: &1; see long text ?

  The SAP error message ACM_SYNTAX142 indicates that there is redundancy in the authorization object definitions within the Profile Generator (PFCG). This typically occurs when the same authorization object is defined multiple times in a role or when there are overlapping authorizations that lead to redundancy.
  Cause:
  
  Duplicate Authorization Objects: The same authorization object is included multiple times in a role.
  Overlapping Authorizations: Different authorization objects may have similar or overlapping values, leading to redundancy.
  Role Maintenance Issues: Changes made to roles without proper checks can lead to redundant entries.
  
  Solution:
  
  Review Role Definitions: Open the role in PFCG and check the authorization data for duplicate entries. Remove any redundant authorization objects.
  Consolidate Authorizations: If there are overlapping authorizations, consider consolidating them to avoid redundancy.
  Use the PFCG Role Comparison Tool: This tool can help identify duplicate or redundant entries in roles.
  Check for Transport Issues: If roles are transported between systems, ensure that the transport does not introduce redundancy.
  Documentation and Best Practices: Maintain proper documentation of roles and authorizations to avoid redundancy in the future.
  
  Related Information:
  
  PFCG (Profile Generator): This is the transaction used to create and maintain roles and authorizations in SAP.
  Authorization Objects: These are used to control access to various functions in SAP based on user roles.
  Long Text: The long text associated with the error message may provide additional context or specific details about the redundancy detected.
  
  If you continue to face issues after following these steps, consider consulting SAP support or reviewing SAP Notes related to authorization management for further guidance.