on 09-28-2010 2:49 AM
Hi experts,
I cannot display any tasks nor workflow temp in t-code PFTC. Via SWDD I can display workflow temp but cannot display task when double clicking. I think the reason may be that I don't have the authority to display HR org structure.
Who knows how to do that?
Thanks,
Wang
Hi,
Profile generator brings PLOG authorisations normally when you assign tcode PFTC.
Check PLOG authorisation (you can use tcode SU56):
Infotype *
Planning Status *
Object Type T, TS, WF, WS
Plan Version 01
Function Code *
Subtype *
Also check if your user id has structural authorisations (transaction OOSB or table T77UA)
If yes, you can use RE_RHAUTH00 to check if you have access to that workflow template from structural authorisations point of view (Object WS and id is template number).
If you don't have structural profile assigned in OOSB check if there is value SAP* | ALL. You get that access if you don't have structural profile assigned. If SAP* ALL is deleted contact your security team. This means that anybody who is not in OOSB table will have 0 structural authorisations.
Regards,
Saku
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
try checking your settings in SWU3, specifically the "maintain definition environment". there should be green ticks. if not, the help there tells you of reports that you can run to correct any errors, eg RHTTCP77 and RHSOBJCH
Regards,
Tim
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
There might be additional HR authorizations, there's a report to run which could grant you these.
However I'm stumped at the moment and can't recall the name of the report.
Check if disabling the HR authorization check in OOAC will grant you access.
Kind regards, Rob Dielemans
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Rick,
Well normally HR authorizations are not meddled with in worflow.
Templates and tasks are HR object types and checked when you start PFTC for instance.
In SPRO under SAP Business Workflow there's a branch called Authorization Management. and under structural authorizations you can restrict the objects on plan version etc. etc.
In a sane world you'll have SAP_ALL in development and people leave these activities alone.
But every once in a while you're stumped that a company hires you as Senior Workflow Consultant and you're not even allowed to see the workflow templates because of some HR authorization check.
Cheers, Rob Dielemans
I agree with Rob.
Quite often HR thinks that structural authorisations are used only in HR and they also go overboard by assigning structurals for everyone irrespect of their HR access. Same time they forget to give full access to object types WS, TS, TG etc for workflow guys. And when (after many meetings) you convince HR to remove structural profiles from workflow and non-HR guys they also remove SAP* entry from T77UA. After that even system users with SAP_ALL can't access workflows.
And I can speak for both parties: have done workflows and HR authorisations. And I admit I have once removed SAP* myself and I can only recommend not to do that.
But as a summary: There is a switch (AUTSW-ORGPD) in table T77S0 (tcode OOAC) where you can switch of structural authorisation check. That ofcourse is the easy way out but might make authorisation team cranky. If one has access to OOSB (T77UA) I would rather remove my user id from there and make sure SAP* has profile ALL.
Saku
Hi WB,
whats your SAP and InternetExplorer version, also check with BASIS on your GUI patch level.
Aditya
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello,
I don't think it has anything to do with HR org structures.
Try checking ST22 for dumps. What happens when you try, there's no message?
regards
Rick Bakker
Hanabi Technology
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Wang,
May be this is due to SAP GUI error. Ask your basis person to find any error related to SAP GUI.
Smit
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello,
Try to do it, then check SU53 for which authorization you need.
Send the result to the Security people.
regards
Rick Bakker
Hanabi Technology
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
83 | |
24 | |
12 | |
9 | |
7 | |
6 | |
5 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.