Hi
We are implementing HR and in the time module we have users entering time via ESS. This we have controlled via P_PERNR (IT0316). This works fine.
Now, for Time admins who are backend users, they have access to CAT2. Since they are ESS users, they have the ESS role.
we need to restrict them via the data entry profile to not have them change timesheets for other data profiles. We have controlled this via P_ORGIN (SUBTYPE).
This combination works fine, as long as the time admins try to change data for other PERNRS. The problem comes when they try to change their own timesheets in the backend via CAT2. Since they have P_PERNR, they get access to all data entry profiles. P_PERNR overrides P_ORGIN in this case.
Is there any way to restrict this?
thanks
P.
