Hi Mikhail,
Yes, I remember that also the SU25 execution update the roles with the new authority-checks updated into the programs in the new release, If i dont remember bad.
If I understand, in the release:
- The SAP developers sometimes add new authority-checks (new authority objects) in the programs related with the transactions.
- SAP update the SU24 with the new authority-objects as a proposal objects.
- The execution of SU25 check the proposal authority objects (news too) and update the roles according the proposal objects.
Sorry for the bad explain because I dont remember exaclty how works it, but Im a little sure that the SU25 update the roles according new authority-checks/authority objects included in the SU24.
I hope that you can solve it soon with my bad explication.
Please let me know with anything.
Best regards.