HR Security - Report to be restricted

[Former Member]

Hi Folks,

We got a requirement to restrict access from executing payroll (program RPCALCU0, which can be accessed via t-code PC00_M10_CALC, PAUX, PAUY, and PUOC_10) for non-relevant payroll areas.

i.e. we should not allow execution if payroll area = X

we modified the role removing this payroll area from all relevant authorization objects like P_PCR and P_PCLX, as this program RPCALCU0 is maintained under P_ABAP authorization object, it is overriding all other authorization checks..

could anyone please help in restricting access to payroll area = X

Thanks in Advance.

[wilder_latino]

P_ABAP is not needed. Remove P_ABAP and use the P_ORGIN or P_ORGINCON

[Former Member]

P_ABAP will exclude authorization checks for the Program mentioned, so you need to get the program name out from P_ABAP first, it's like giving SAP_ALL first and then trying to restrict some access.

Cheers !!

Zaheer