BADI HRBAS00_GET_PROFL to dynamically allocate Profiles

[HammerM]

Hi SAP Community

We are trying to utilize BADI HRBAS00_GET_PROFL to dynamically allocate the Profiles (field PROFL) of Authorization Object P_ORGINCON, this is so that we can move away from allocating them manually in field PROFL of Authorization Object P_ORGINCON in our Roles.

At the moment we have the following Authorization Switches in place in T77S0

AUTSW ADAYS 15
AUTSW APPRO 0
AUTSW DFCON 1
AUTSW INCON 1
AUTSW NNCON 0
AUTSW NNNNN 0
AUTSW ORGIN 1
AUTSW ORGPD 1
AUTSW ORGXX 0
AUTSW PERNR 1
AUTSW TRACE
AUTSW VACAU
AUTSW XXCON 0

The logic in our BADI implementation gets the PROFL object from Infotype 1017 which is assigned to the Position (S) of a PERNR

So the logic finds the username (sy-uname) of the end user, finds their associated PERNR and then finds their Position (S). It then get the PROFL from the Infotype 1017 relationship to the Position. All this logic works fine. We then add the PROFL values to the table t77pr_tab in the exporting Parameter. Plus we also set the OUT_FLAG = 'X'

Having done all the above and confirming the table t77pr_tab is populated with the PROFL (which is a valid PROFL in table T77PQ) we still get Authorization errors when trying to access various PERNR records that are included in the Evaluation Path of the PROFL

Can anyone spot what we are doing wrong or if this approach is not viable?

Thanks in advance

Mark

[HammerM]

Just in case anyone has the same issue - we had context based authorization checking in place which was not required.