Skip to Content
avatar image
Former Member

Structural Authorizations Issue

Hi All,

I have a scenario where a User in a specific position should be able to maintain only employees in his department. I want to create one SA profile which can be valid all the users to maintain employees in their  department only.

I am using the FM RH_GET_MANAGER_ASSIGNMENT with Object O evaluation path as MANASS.  I have also  maintained the user as manager in the OM but when I check the  information tab in OOSP for that profile I get a blank screen. Is there anything else that I am missing.

Also if I don't want to make this person as the manager in the OM will the function module  RH_GET_ORG_ASSIGNMENT ( Object O and Evaluation path ORGASS) help me in restricting users in his own department.

Any help will be appreciated.

Best Regards,

Mohammed Sharfuddin

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

5 Answers

  • avatar image
    Former Member
    Nov 25, 2013 at 10:09 AM

    Hi Mohammed,

    In case the user is the manager for the org unit then you'll be able to use the standard function module available (RH_GET_MANAGER_ASSIGMENT). Depending on whether you want to provide access to only that Org Unit or also to the Org Units below, you would use either evaluation path O-P or O-S-P.

    In case you don't want to make this user the manager of the Org Unit, you can indeed substitute RH_GET_MANAGER_ASSIGMENT with RH_GET_ORG_ASSIGNMENT and use the same evaluation paths as in above example.

    On the OOSP part I'm not too sure but I think it won't show you anything because the result isn't a constant. The best way to test it would be to assign it to a user and use transaction RE_RHAUTH00 (program RHAUTH00) or alternatively you could run the individual steps manually (function module followed by RH_STRUC_GET for the evaluation path).

    Hope this helps,

    Brent

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Nov 26, 2013 at 06:26 AM

    Thank You Brent & Dimitri for your response can you kindly clarify me if I can use different evaluation path in OOSP other then MANASS. Wanted to know as MANASS is hardcoded in the FM RH_GET_MANAGER_ASSIGMENT

    I am checking on the other reports you have suggested me and will update you if this resolves the issue.

    Best Regards,

    Mohammed Sharfuddin

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi Mohammed,

      I believe you are confusing two fields in your structural profile. In your example the field "Function Module" would contain RH_GET_MANAGER_ASSIGNMENT (which uses the evaluation path MANASS).

      When Dimitri and I are refering to evaluation paths O-O-S-P and O-P, we mean this to be used in the field "Eval. Path" in transaction OOSP.

      The function module is used to retrieve the starting point (the Org Unit that the user is the manager for) and then the evaluation path (O-O-S-P or O-P) is used to collect the objects that we give the user access to in this structural profile (i.e. every O, S and P below the starting Org Unit).

      I hope this clears things up. If not then please post your structural profile like Dimitri suggested.

      Brent

  • avatar image
    Former Member
    Nov 26, 2013 at 11:10 AM

    Thank you Brent & Dimitri for the clear solution. I have pasted screenshot documents I apologize if am taking more time of yours.

     

    Here when I login to test id and maintain the user it is giving me an authorization error

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Nov 26, 2013 at 11:21 AM

    I even face the same error when I don't use FM. The example below is for another profile to the same user

    In the two profile assigned to the user one is to display all students and other is to maintain students in their department. Just to add one more info earlier the BADI HRBAS00_STRUAUTH was active but now we have deactivated the BADI

    New Profile

    Add comment
    10|10000 characters needed characters exceeded

    • in the first structural profile you used the RH_GET_MANAGER_ASSIGNMENT FM to determine what org. unit the user is managing.¬† in the second you hard-coded the position of the user as a starting point for the structural profile.

      I'd suggest making the structural profile ZCUST_DYN with the O as starting point (as before) and use the ZSTADVIS evaluation path instead of the O_S_P one you used before.

  • avatar image
    Former Member
    Dec 04, 2013 at 09:18 AM

    Hello Dimitri,

    Thank you for all the help. I am able to maintain the students using context SA profile. But for some students when I try to change them I get an error Object Not Found. Can this be because that the evaluation path does not have any relation on the assigned advisors.

    I wanted to post a screenshot but attach image icon is greyed out.

    Best Regards,

    Mohammed Sharfuddin

    Add comment
    10|10000 characters needed characters exceeded