Skip to Content
avatar image
Former Member

Restricting access to only Personnal Area 1000.

Friends

I am trying to restrict my Roles to PA 1000.

I confirm that all the P_ORGINCON value has PA value assigned to 1000.

However, I have noticed some of the Roles that are used by other users in other PA, has Org Assignment value left

empty but has specific PA value ( 1020 example) in P_ORGINCON.auth object.

Does the Org assigment vaule " " (empty) for PA overrides the specific value for P_ORGINCON in the Role? Please advise.

Thanks,

PT.

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

3 Answers

  • Best Answer
    avatar image
    Former Member
    Jul 08, 2010 at 08:07 PM

    HR did not always use the DUMMY construct as it was intended.

    Depending on which release you are on it will work differently, but generally you can assume that the checks will be fullfilled with a ' ' value in the authorizations.

    Of course you can test it and then let us know how it works on your release...

    Cheers,

    Julius

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 08, 2010 at 08:22 PM

    Hi you have extended context sensitive object:

    I doubt if the personnel area in HR appears as an organization level.

    when you are using P_ORGINCON the necessary switch should be on at the system level

    pay attention to maintain the PA same in P_ORGXX, P_ORGXXCON

    P_pernr & P_orgin.

    Also check to see if the role can be generated if the Organization level is not maintained, that the authorization tab for such roles will be yellow.

    I would also agree with Julius instruction.

    From what I understand this is an authorization object and PA should

    be maintained appropriately

    let me if I have understood your question correctly, I am thinking PA- is personnel Area in your case...!

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 09, 2010 at 01:14 AM

    Hi Pranav,

    However, I have noticed some of the Roles that are used by other users in other PA, has Org Assignment value left

    empty but has specific PA value ( 1020 example) in P_ORGINCON.auth object.

    Does the Org assigment vaule " " (empty) for PA overrides the specific value for P_ORGINCON in the Role? Please advise.

    You are talking about organizational key (VSDK1),then it should either get filled from org assignment infotype(0001) or you need to enter manually.

    We can assume at org assignment infotype(0001),the value is mentioned as " " .

    go thru the link : http://help.sap.com/saphelp_470/helpdata/en/17/4bba3b3bf00152e10000000a114084/content.htm

    Thanks,

    Sri

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Hi Pranva,

      First of all you check,whether data exist for PA 1020 Org key 3000 . Since trace report shows ; for remaining fields.

      2. Talk to your HR developer,is that the cause for error.?

      Thanks,

      Sri