Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

structural authorizations not working

Former Member

‎02-21-2010 12:19 AM

0 Kudos

Hi,

We have new HCM system ECC 6.0 EP4 ,we enabled Contextual authorizations swithch and ORGPD switch , i created simple PD profile with one orgunit (500001) updated this in test role of P_ORGINCON object and assign to Test user (Test user already part of org stru assined to valid Personal no)

When test user trying to access Personal no's under 500001 org unit getting no autharization error.

Did i miss any thing ? i am not able to find any wrong in this process Org unit and positions and persons belongs or unit are valid.

Thanks

4 REPLIES 4

Former Member

‎02-21-2010 6:23 AM

0 Kudos

Hi ,

Looks like problem with Contextual Autharization , i disables AUTSW INCON (P_ORGINCON)switch and enabled AUTSW ORGIN (P_ORGIN) switch also assigned PD profile to user manuvally through OOSB , this time Structral autharizations are working perfect .

Did i missing any other settings for contextual autharizations ?

Thanks

Former Member

‎02-21-2010 3:07 PM

0 Kudos

In Contextual Authorizations system not

validating P_ORGINCON of PROFIL field it is looking T77UA table

entry ,if i create entry manually through OOSB Structural

authorizations are working , i understand that contextual are

alternative to T77UA not an addition ?

Is it by nature or do we have to do any think to read from autharization object?

Thanks

Bob

Former Member
In response to Former Member

‎02-21-2010 9:59 PM

0 Kudos

It looks okay to me.

P_ORGINCON-PROFL looks in OOSB to see which PD profile the user has. If they don't have any, then the profile of user SAP* applies.

If you want it to look elsewhere, then the view has 2 BADI (Business Add-In's) available:

HRBAS00_GET_PROFL

and

HRBAS00_STRU_AUTH

P_ORGXXCON can be used as an alternative to P_ORGINCON. Perhaps that is what you meant? Please see the documentation in transaction SU21.

Cheers,

Julius

Former Member

‎02-23-2010 3:59 AM

0 Kudos

Thanks for reply ,

If we enable one of these BADI in the system we no need to maintain T77UA entry manually right ,if we don't maintain this table how we extract PD profile assignments data to BI system ? Since T77UA is empty and what is the SAP recommended method.

Thanks

Bob