Difference between Authorization Object and an Object Class in ABAP?

Question

I've been a Java developer having a limited knowledge about ABAP.

While trying to understand the SAP Authorization concept, I came across the terms Authorization Objects and an Object Class.

Now as per my understanding of Object Oriented concepts, an Object is a run time instance of a Class.

So I'm a bit confused with the term ABAP Objects and an Object Class.

Can someone please answer my following questions:

1. What is the meaning of the term "Object Class" in ABAP?

2. What does Authorization Object mean? Since objects are created at run time, how can we create an object at design time?

Any replies will be of great help.

Answer 1

Well, I've found this nice link which explains very well the concepts.

The main idea is: in SAP, you will hear the term "class" and "object" being used a lot. They don't mean anything like the concepts from OO. An authorization class is just a general description of "what you're allowed to do", whereas an authorization object is a more particular description of that.

Authorization objects can be used programmatically to check if a user has the right to "x"... and as a DEV, you can forget to check for them, which can cause security issues :).