Skip to Content
avatar image
Former Member

structural authorizations not working

Hi,

We have new HCM system ECC 6.0 EP4 ,we enabled Contextual authorizations swithch and ORGPD switch , i created simple PD profile with one orgunit (500001) updated this in test role of P_ORGINCON object and assign to Test user (Test user already part of org stru assined to valid Personal no)

When test user trying to access Personal no's under 500001 org unit getting no autharization error.

Did i miss any thing ? i am not able to find any wrong in this process Org unit and positions and persons belongs or unit are valid.

Thanks

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

3 Answers

  • avatar image
    Former Member
    Feb 21, 2010 at 06:23 AM

    Hi ,

    Looks like problem with Contextual Autharization , i disables AUTSW INCON (P_ORGINCON)switch and enabled AUTSW ORGIN (P_ORGIN) switch also assigned PD profile to user manuvally through OOSB , this time Structral autharizations are working perfect .

    Did i missing any other settings for contextual autharizations ?

    Thanks

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Feb 21, 2010 at 03:07 PM

    In Contextual Authorizations system not

    validating P_ORGINCON of PROFIL field it is looking T77UA table

    entry ,if i create entry manually through OOSB Structural

    authorizations are working , i understand that contextual are

    alternative to T77UA not an addition ?

    Is it by nature or do we have to do any think to read from autharization object?

    Thanks

    Bob

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      It looks okay to me.

      P_ORGINCON-PROFL looks in OOSB to see which PD profile the user has. If they don't have any, then the profile of user SAP* applies.

      If you want it to look elsewhere, then the view has 2 BADI (Business Add-In's) available:

      HRBAS00_GET_PROFL

      and

      HRBAS00_STRU_AUTH

      P_ORGXXCON can be used as an alternative to P_ORGINCON. Perhaps that is what you meant? Please see the documentation in transaction SU21.

      Cheers,

      Julius

  • avatar image
    Former Member
    Feb 23, 2010 at 03:59 AM

    Thanks for reply ,

    If we enable one of these BADI in the system we no need to maintain T77UA entry manually right ,if we don't maintain this table how we extract PD profile assignments data to BI system ? Since T77UA is empty and what is the SAP recommended method.

    Thanks

    Bob

    Add comment
    10|10000 characters needed characters exceeded