Notify user about not allowed results via ASPECT pfcg_auth?

Question

In "classic" ABAP authority checks, you would sometimes loop over a result list. If for at least one item the check fails, you'd notify the user about this and show only the items he's entitled to. My question is: How would you do this in CDS using the pfcg_auth aspect? For example:

define role my_role {
  grant select 
    on vbak
  where ( vkorg ) = aspect pfcg_auth ( v_vbak_vko, vkorg, actvt = '03' );
}

How would you tell that the selection found say 50 sales orders but the user is only authorized to display 40 of them?

Answer 1

For CDS view select, there is a syntax that you can select bypassing the DCL WITH PRIVILEGED ACCESS

You can select count(*) for the data in the database WITH PRIVILEGED ACCESS. if the numbers do not equal, you can raise the message.