Time administrator is able to change own clock in and clock out

[Former Member]

Hi All,

We currently have time administrators who enter their daily worked hours using clock in and clock out via the ESS Portal. These administrators also have the authorization to change the clock in and clock out via PA30 and TMW for the employees under the same organizational unit as they are. We are experiencing the problem where these administrators can change their own clock in and clock outs. The administrators should be able to change the other employees clock in and clock outs but not their own.

I need to know how can I change the authorizations to only allow administrators to change other employees clock in and clock outs but no their
own?

Any help will be greatly appreciated.

Thanks,

Santhiel Ramos

[siddharthrajora]

But as an employee Time admin can still change their clock in/out? do you allow change of clock in/out ? otherwise you can restrict via p_pernr/p_orgin http://scn.sap.com/thread/3257035 you can check here at the code level if required,

[Former Member]

Hi Siddharth,

Thanks for the reply. We already restricted the administrator to change its own clock in/out in the P_PERNR; but the problem is that the administrators have two roles assigned, one role is the ESS role which all employees have allowing them to do clock in/out via the ESS Portal, and there is a second role which is assigned only to Time administrators. The time administrator role allows them to go into PA30 and TMW to change other employees time, but this authorization is allowing the administrator to change its own time, and this is not correct, the Time administrator clock in/out should only be change by his/her manager.

I believe the problem is that the ESS role allows the, to do clock in/out, but the Time administrator role allows them access to PA30 and TMW to change their own clock in/out.

How can I prevent this to happen? Your help is greatly appreciated.

Santhiel

[siddharthrajora]

http://scn.sap.com/thread/1780231 http://scn.sap.com/thread/217859 http://help.sap.com/saphelp_erp2004/helpdata/en/94/b8b83b5b831f3be10000000a114084/content.htm check your roles via HRAUTH and read note 902000 as it has all the auth pdfs ie ALso one more option is consider using Symmeterical verification principle.

[Former Member]

Thanks much for the help Siddharth. This really helps.