SAP Business Process Management
Implementing Permission Checks in Composite Application Framework
This document explains the implementation of permissions in entity services. You will also get familiar with Access Control Lists and the handling of permission propagations.