Understanding the AS ABAP authorization concept