Restricting read access for selective infotypes in PA30

[samnovice_new]

Hi,

I would like to restrict read access for selective infotypes, for particular username.

Using google search I managed to find useful topics, but not exactly what I need.
I know that one part cant be solved using P_ORGIN authorization object.

However, I would like for example, when user tries to read data from IT0008,
that is not possible.

Any suggestion is welcome and thanks in advance.

Sam

[siddharthrajora · Accepted solution]

P_ORGIN is the right authorization object for this to be used,

You can get example here

https://archive.sap.com/discussions/thread/3399166

https://archive.sap.com/discussions/thread/3317279

and many more

[ChrisSolomon]

Why are YOU doing this? Why not have a security expert do it? ....and that is where you should likely ask....over in the security space/place/tag.