Question: Hi All,
Im a developer so dont have much knowledge with authorizations in HR. However I have developed numerous reports using the logical database PNP. What we are trying to achieve is the following scenario:
User A, can see all infotypes except infotype 0008 (Basic Pay).
If User A runs the report, he can see all the information, except data from infotype 008. Is this scenario even possible?
Currently our problem is it prevents him from even running the report as he has no access for infotype 0008.
Im assuming our problem is how we've setup the P_PERNR and P_ORGIN auth objects for him.
We currently dont have infotype 0008 in his P_ORGIN object, but if we leave it out of the P_PERNR object, we get the error "No authorization for Infotype 0008".
If we add it to P_PERNR, he can run the report but then can see infotype 0008 information, even though it is still not in his P_ORGIN object.
Anyone know how to solve this so he can still run the report but just not see infotype 0008's data?
By the way, we have taken out the P_ABAP auth object.
Thanks
Answer:
Hi
If User A runs the report, he can see all the information, except data from infotype 008. Is this scenario even possible? Yes should be possible depending on the type of report - and whether IT 0008 is a require output.
P_PERNR is used for giving access to an employee's personal information.
http://help.sap.com/saphelp_47x200/helpdata/en/94/b8b83b5b831f3be10000000a114084/frameset.htm
You can either allow them to only access own info or exclude them from accessing own info - so probably not relevant in this case.
The object you should be using is P_ORGIN (and possibly P_ORGXX) - you are correct in thinking that this should not need access to infotyoe 0008.
You can run a auth trace (ST01) which should show you what the issue is -there will be a auth check on P_ORGIN for IT 0008. I believe the problem will be what the program says to do when it fails on IT 0008 - currently it appears the program displays error message "you are not authorised...."
I believe this has something to do with the return code - but I am not an expert in this area.
If it is a custom report you might be able to change the return code.
Trying looking a a report developed via SAP Query (SQ01) in a trace - with the desired authorisations as this should work. You might be able to work backwards from there to get your answer.
Hope some of above helps
Answer:
Thanks for the reply MikeNZ, but we have a report developed using SQ01 with logical daabase PNP and it gives us the same error. "No authorization for infotypre 0008".
The funny thing is if we do not put in the infotype "0008" in the P_PERNR (inftyp) field, this is when we get this error. If we put infotype 0008 in P_PERNR, we do not get this error and it allows the user to see infotype 0008's data even though it is missing from P_ORGIN. Its like P_PERNR controls it all.
I know this isnt right, but we are all stumped.
Just to re-iterate, we dont want a hard error, we want the user to still be able to run the report, but just not see 0008 data.
How to Earn Rs.25000 every month in internet without Investment?
HR authorizations with logical databases
Labels:
Sap HR - Faqs
Subscribe to:
Post Comments (Atom)
topics
-
▼
2007
(1406)
-
▼
November
(1359)
- Free Download SAP FI Certification study pdf books
- Implementing SAP R/3 on OS/400
- Update SAP Kernel in UNIX based
- Security Audit Log (BC-SEC).pdf
- Security Audit Log.pdf
- Securities,pdf
- Secure Store & Forward / Digital Signatures (BC-SE...
- Secure Network Communications (BC-SEC-SNC)
- Free download use ful T-codes
- I did not find any OSS notes appropriate for my pr...
- How to apply OSS notes number?
- What is OSS Notes number?
- Where can i access SAP OSS?
- WHAT IS OSS
- Disaster Recovery Plan to Restore Production System
- Steps to Install SAP Note in sap
- Difference Between SAP Notes and Support Package
- Question : Subject : Support packages testing
- Five Different "User Type"
- How to solve the Time Zone Definition Problems?
- Setting the User Decimals Format
- Schedule Manager
- Various Important SAP Basis T-Code
- Trace Functions in sap
- System Trace: Error Analysis in sap
- System Trace(ST01) in sap
- Roles and Authorizations Used in Background Proces...
- Deleting Multiple Spool Requests Simultaneously in...
- Logging and Tracing in spool
- Print and Output Management in spool
- Background Job Monitoring Monitor in CCMS
- Monitoring the Database Using the Alert Monitor
- Monitoring the Operating System Using the Alert Mo...
- Monitoring Memory Management Using the Alert Monitor
- Method Dispatching Monitor in CCMS
- Remote Application Server Status Monitor in CCMS
- GRMG Self-Monitoring Monitor in CCMS
- CCMS Selfmonitoring Monitor for System-Wide Data i...
- Logfile Monitoring Monitor in CCMS
- Logon Load Balancing Monitor in CCMS
- Transaction-Specific Dialog Monitor in CCMS
- Workload Collector Monitor in CCMS
- System Errors Monitor in CCMS
- System Configuration Monitor in CCMS
- Syslog Monitor in CCMS
- Spool System Monitor in CCMS
- Security Monitor in CCMS
- Performance Overview Monitor in CCMS
- Operating System Monitor in CCMS
- Filesystems Monitor in CCMS
- Entire System Monitor in CCMS
- Monitoring the Enqueue Service in CCMS
- Dialog per Application Server Monitor in CCMS
- Dialog Overview Monitor in CCMS
- Database Monitor in CCMS
- Transactional RFC and Queued RFC Monitor in CCMS
- Communications Monitor in CCMS
- Buffers Monitor in CCMS
- Background Job Monitoring Monitor(CCMS)
- Background Processing Monitor(CCMS)
- Availability and Performance Overview Monitor (CCMS)
- SAP CCMS Monitor Templates Monitor Set
- Creating and Changing a Monitoring Pause(CCMS)
- Creating and Changing Monitoring Rules(CCMS)
- Configuring Availability Monitoring(CCMS)
- Update Repositories(CCMS)
- Displaying Central Performance History Reports(CCMS)
- Displaying Report Properties
- Scheduling and Executing a Report
- Variables in Group Names
- Creating a Report Definition(CCMS)
- Maintaining Collection and Reorganization Schemata...
- Maintaining Collection and Reorganization Schemata...
- Creating and Editing a Calendar Schema(CCMS)
- Creating and Editing a Day Schema
- Customizing the Alert Monitor(CCMS)
- Resetting MTEs and Alerts(CCMS)
- Reorganizing Completed Alerts(CCMS)
- Display Completed Alerts(CCMS)
- Automatically Complete Alerts(CCMS)
- Completing Alerts(CCMS)
- Starting Methods (CCMS)
- Processing Alerts(CCMS_
- Displaying the Technical View: Central Performance...
- Displaying the Technical View: Threshold Values(CCMS)
- Displaying the Technical View: Status Autoreaction...
- Displaying the Technical View: Status Data Collector
- Displaying the Technical View: Method Allocation
- Displaying the Technical View: Info on MTE
- Display Types and Views of the Alert Monitor(CCMS)
- Properties of Status Attributes (CCMS)
- Properties of Performance Attributes(CCMS)
- Properties of Log Attributes (CCMS)
- General Properties of Monitoring Tree Elements(CCMS)
- Properties of Monitoring Objects and Attributes
- Elements of the Alert Monitoring Tree
- Alert Monitoring Tree(CCMS)
- Monitors(CCMS)
- Monitor Sets (CCMS)
- Elements of the Alert Monitor (CCMS)
-
▼
November
(1359)
No comments:
Post a Comment