Structural authorization profile. Authorization for manager's data

[former_member1373675]

Dear colleagues!

I cannot select proper evaluation path for structural authorization profile.

I created structural profile to restrict access to Organizational unit.

I assigned this profile to test user, which is specialist in Department A according to hierarchy. So this "specialist" should see only his department.

Profile is: Plan vers = 1; Object type = O; Maint = yes;  Eval.Path = O-S-P; Function Module = RH_GET_ORG_ASSIGNMENT

In role in P_ORGINCON there are no restrictions for Employee Groups or Authorization pofiles. All *

But when I login to this user, I do not see his manager's data.

As I understood, I need another Evaluation Path. Please, help me to select right one .

Thank you!

[former_member1373675 · Accepted solution]

Dear Eva and Stephen.

Thank you for your responses.

For now I have chosen variant with access to all 3 Org Units.

But I keep trying to limit access: for Org Unit 1 and Org Unit 1.2.

Yan

[Eva_1]

Hello Yan,

the evaluation path o-s-p doesn't contain the manager relation (012). You can choose another one which contains this as well (like BOSSORG or similar) or create a new one.

Hope it helps!

Eva

[former_member1373675]

Hello Eva.

Thank you for your response.

Can I add 2 Ev.Paths in to same profile? 1st I would like to cut access to all other Org Units, than give access to whole list of members including manager. Or it is better to add another profile?

Yan

[Eva_1]

Hello Yan,

you mean to add to objects with evaluation pathes in the same profile in T77PR?

You can add 2 profiles if both will be ok in the same P_ORGINCON. I mean you don't want to give access to different infotypes for these 2 paths.

Eva

[former_member1373675]

Hello Eva.

Thank you for your response.

I have checked hierarchy. The Org Unit reports to higher Org Unit, which contains also manager, whose data I required.

E.G.

Org Unit 1

     - Manager

     - Org Unit 1.1

     - Org Unit 1.2

              - user1

              - user2

              - MY test user

              - user3

So my test user need to see Manager. But now it sees only Org Unit 1.2

I tried to create Z-evaluation-path with

Obj.Type A/B    Relat'ship Priority Rel.obj.type

  O               A         002        *            O

But it does not help.

Yan

[Eva_1]

it is because of RH_GET_ORG_ASSIGNMENT. You should remove it from the profile and assign org.unit1 directly with the appropriate evaluation path.

Is it a solution for your case?

[Stephen_B]

Does your test user need to see all data from all Objects (Org Unit, Position, Person) in Org unit 1 (including manager), Org Unit 1.1 and Org Unit 1.2?

If so remove RH_GET_ORG_ASSIGNMENT, leave the field blank, then in the Object ID field, enter the Object ID of Org Unit 1. Enter o-s-p as your eval path. Only this eval path is required.

RH_GET_ORG_ASSIGNMENT FM gets the Org Unit where the user ID/PERNR directly belongs in Org Structure  and dynamically put this in the 'Object ID' field in the structural profile at run time.

[Stephen_B]

That structural profile should be enough. Have you tried running RHBAUS00 for the test user ID to repopulate the index?

[former_member1373675]

Hi Stephen

When enter user ID, this report shows nothing. "User had been updated: 0"

Yan