06-12-2012 1:52 PM
Some users in our payroll section are having a problem deleting personnel numbers, These are personnel numbers that have no payroll records for them, they were rasied in error and need to be deleted before any payroll processing has taken place,
The error message they get is 'You do not have READ authorisation for at least 1 infotype "
These users DO have read access via P_ORGIN and access to all the infotypes that the SU53 displays
An Su53 trace seems to point to auth object P_PERNR failing for some reason
This is not for all personnel numbers that need to be deleted, just some, I am having trouble finding a 'common theme'
has anybody come across this at all
thanks
Debbie
06-19-2012 8:22 AM
Hi Debbie,
Authorization checks in HR programs, built on logical database, are sequential and objects like P_PERNR & P_ABAP are always checked before P_ORGIN (CON). When these checks fail, only then P_ORGIN (CON) authorizations are checked.
From the description of your issue, it looks like some PA infotype access is missing from P_ORGIN (CON) object (assuming user is not trying to delete his own pernr ) It will be better if you can run a ST01 trace and look for RC=4 against object P_ORGIN/P_ORGINCON.
Let me know what you find. Thanks
Cheers!
Sandipan
06-19-2012 8:22 AM
Hi Debbie,
Authorization checks in HR programs, built on logical database, are sequential and objects like P_PERNR & P_ABAP are always checked before P_ORGIN (CON). When these checks fail, only then P_ORGIN (CON) authorizations are checked.
From the description of your issue, it looks like some PA infotype access is missing from P_ORGIN (CON) object (assuming user is not trying to delete his own pernr ) It will be better if you can run a ST01 trace and look for RC=4 against object P_ORGIN/P_ORGINCON.
Let me know what you find. Thanks
Cheers!
Sandipan
06-19-2012 9:38 AM
Thanks Sandipan,
I did run an ST01 trace and it seems to agree with your comments re this statement :-
"objects like P_PERNR & P_ABAP are always checked before P_ORGIN (CON). When these checks fail, only then P_ORGIN (CON) authorizations are checked."
Some users have been having this same propblem but for WRITE access failure not a READ access failure .
Below is the READ failure ST01 trace If you could have a quick look at it that would be most helpful
Thanks
Debbie
16:23:17:26 | AUTH | - - - | S_TCODE RC=0 | tcode=PA30;TCD=PA30; |
16:23:17:49 | AUTH | - - - | P_PERNR RC=4 | tcode=PA30;AUTHC=R;PSIGN=*;INFTY= ;SUBTY= ; |
16:23:17:49 | AUTH | - - - | P_PERNR RC=4 | tcode=PA30;AUTHC=R;PSIGN=E;INFTY=;SUBTY=; |
16:23:17:49 | AUTH | - - - | P_PERNR RC=4 | tcode=PA30;AUTHC=R;PSIGN=I;INFTY= ;SUBTY= ; |
16:23:17:49 | AUTH | - - - | P_ORGIN RC=0 | tcode=PA30;INFTY= ;SUBTY= ;AUTHC=R;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:17:258 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0001;SUBTY=' '; |
16:23:17:258 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0001;SUBTY=' '; |
16:23:17:258 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0001;SUBTY=' '; |
16:23:17:258 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0001;SUBTY=' '; |
16:23:17:258 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0001;SUBTY=' ';AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:17:260 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0001;SUBTY=' ';AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:17:260 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0001;SUBTY=' ';AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:17:261 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0003;SUBTY=' '; |
16:23:17:261 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0003;SUBTY=' '; |
16:23:17:261 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0003;SUBTY=' '; |
16:23:17:261 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0003;SUBTY=' '; |
16:23:17:261 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0003;SUBTY=' ';AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:17:261 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0003;SUBTY=' ';AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:17:261 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0003;SUBTY=' ';AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:17:263 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0002;SUBTY=' '; |
16:23:17:263 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0002;SUBTY=' '; |
16:23:17:263 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0002;SUBTY=' '; |
16:23:17:263 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0002;SUBTY=' '; |
16:23:17:263 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0002;SUBTY=' ';AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:17:263 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0002;SUBTY=' ';AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:17:264 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0002;SUBTY=' ';AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:17:264 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0000;SUBTY=01; |
16:23:17:264 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0000;SUBTY=01; |
16:23:17:264 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0000;SUBTY=01; |
16:23:17:264 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0000;SUBTY=01; |
16:23:17:264 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0000;SUBTY=01;AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:17:264 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0000;SUBTY=01;AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:17:265 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0000;SUBTY=01;AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:17:268 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0001;SUBTY=' '; |
16:23:17:268 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0001;SUBTY=' '; |
16:23:17:268 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0001;SUBTY=' '; |
16:23:17:268 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0001;SUBTY=' ';AUTHC=R;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:17:268 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0001;SUBTY=' '; |
16:23:17:268 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0001;SUBTY=' '; |
16:23:17:268 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0001;SUBTY=' '; |
16:23:17:268 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0001;SUBTY=' ';AUTHC=R;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:17:268 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0001;SUBTY=' ';AUTHC=R;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:17:410 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0000;SUBTY=' '; |
16:23:17:410 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0000;SUBTY=' '; |
16:23:17:410 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0000;SUBTY=' '; |
16:23:17:410 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0000;SUBTY=' ';AUTHC=R;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:17:410 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0000;SUBTY=' '; |
16:23:17:410 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0000;SUBTY=' '; |
16:23:17:410 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0000;SUBTY=' '; |
16:23:17:410 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0000;SUBTY=' ';AUTHC=R;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:17:411 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0000;SUBTY=' ';AUTHC=R;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:17:412 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0002;SUBTY=' '; |
16:23:17:412 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0002;SUBTY=' '; |
16:23:17:412 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0002;SUBTY=' '; |
16:23:17:412 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0002;SUBTY=' ';AUTHC=R;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:17:412 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0002;SUBTY=' '; |
16:23:17:412 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0002;SUBTY=' '; |
16:23:17:412 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0002;SUBTY=' '; |
16:23:17:412 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0002;SUBTY=' ';AUTHC=R;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:17:412 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0002;SUBTY=' ';AUTHC=R;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:17:413 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0006;SUBTY=' '; |
16:23:17:413 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0006;SUBTY=' '; |
16:23:17:413 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0006;SUBTY=' '; |
16:23:17:413 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0006;SUBTY=' ';AUTHC=R;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:17:413 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0006;SUBTY=' '; |
16:23:17:413 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0006;SUBTY=' '; |
16:23:17:413 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0006;SUBTY=' '; |
16:23:17:413 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0006;SUBTY=' ';AUTHC=R;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:17:413 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0006;SUBTY=' ';AUTHC=R;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:17:414 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0007;SUBTY=' '; |
16:23:17:414 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0007;SUBTY=' '; |
16:23:17:414 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0007;SUBTY=' '; |
16:23:17:414 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0007;SUBTY=' ';AUTHC=R;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:17:414 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0007;SUBTY=' '; |
16:23:17:414 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0007;SUBTY=' '; |
16:23:17:414 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0007;SUBTY=' '; |
16:23:17:414 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0007;SUBTY=' ';AUTHC=R;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:17:414 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0007;SUBTY=' ';AUTHC=R;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:17:415 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0009;SUBTY=' '; |
16:23:17:415 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0009;SUBTY=' '; |
16:23:17:415 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0009;SUBTY=' '; |
16:23:17:415 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0009;SUBTY=' ';AUTHC=R;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:17:415 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0009;SUBTY=' '; |
16:23:17:415 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0009;SUBTY=' '; |
16:23:17:415 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0009;SUBTY=' '; |
16:23:17:415 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0009;SUBTY=' ';AUTHC=R;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:17:415 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0009;SUBTY=' ';AUTHC=R;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:17:416 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0016;SUBTY=' '; |
16:23:17:416 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0016;SUBTY=' '; |
16:23:17:416 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0016;SUBTY=' '; |
16:23:17:416 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0016;SUBTY=' ';AUTHC=R;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:17:416 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0016;SUBTY=' '; |
16:23:17:416 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0016;SUBTY=' '; |
16:23:17:416 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0016;SUBTY=' '; |
16:23:17:416 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0016;SUBTY=' ';AUTHC=R;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:17:416 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0016;SUBTY=' ';AUTHC=R;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:17:416 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0041;SUBTY=' '; |
16:23:17:417 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0041;SUBTY=' '; |
16:23:17:417 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0041;SUBTY=' '; |
16:23:17:417 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0041;SUBTY=' ';AUTHC=R;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:17:417 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0041;SUBTY=' '; |
16:23:17:417 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0041;SUBTY=' '; |
16:23:17:417 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0041;SUBTY=' '; |
16:23:17:417 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0041;SUBTY=' ';AUTHC=R;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:17:417 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0041;SUBTY=' ';AUTHC=R;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:17:417 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0032;SUBTY=' '; |
16:23:17:417 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0032;SUBTY=' '; |
16:23:17:417 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0032;SUBTY=' '; |
16:23:17:418 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0032;SUBTY=' ';AUTHC=R;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:17:418 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0032;SUBTY=' '; |
16:23:17:418 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0032;SUBTY=' '; |
16:23:17:418 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0032;SUBTY=' '; |
16:23:17:418 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0032;SUBTY=' ';AUTHC=R;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:17:418 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0032;SUBTY=' ';AUTHC=R;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:22:403 | AUTH | - - - | S_TCODE RC=0 | tcode=PU00;TCD=PU00; |
16:23:22:405 | AUTH | - - - | P_TCODE RC=0 | tcode=PU00;TCD=PU00; |
16:23:22:405 | AUTH | - - - | S_TCODE RC=0 | TCD=PU00; |
16:23:24:178 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0006;SUBTY=1; |
16:23:24:179 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0006;SUBTY=1; |
16:23:24:179 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0006;SUBTY=1; |
16:23:24:179 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0006;SUBTY=1; |
16:23:24:179 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0006;SUBTY=1;AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:24:180 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0006;SUBTY=1;AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:24:180 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0006;SUBTY=1;AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:24:181 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0006;SUBTY=2; |
16:23:24:181 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0006;SUBTY=2; |
16:23:24:181 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0006;SUBTY=2; |
16:23:24:181 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0006;SUBTY=2; |
16:23:24:181 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0006;SUBTY=2;AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:24:181 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0006;SUBTY=2;AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:24:181 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0006;SUBTY=2;AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:24:181 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0006;SUBTY=3; |
16:23:24:181 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0006;SUBTY=3; |
16:23:24:181 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0006;SUBTY=3; |
16:23:24:181 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0006;SUBTY=3; |
16:23:24:181 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0006;SUBTY=3;AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:24:181 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0006;SUBTY=3;AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:24:181 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0006;SUBTY=3;AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:24:182 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0007;SUBTY=' '; |
16:23:24:183 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0007;SUBTY=' '; |
16:23:24:183 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0007;SUBTY=' '; |
16:23:24:183 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0007;SUBTY=' '; |
16:23:24:183 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0007;SUBTY=' ';AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:24:183 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0007;SUBTY=' ';AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:24:183 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0007;SUBTY=' ';AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:24:186 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0008;SUBTY=0; |
16:23:24:186 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0008;SUBTY=0; |
16:23:24:186 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0008;SUBTY=0; |
16:23:24:186 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0008;SUBTY=0; |
16:23:24:186 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0008;SUBTY=0;AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:24:186 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0008;SUBTY=0;AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:24:186 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0008;SUBTY=0;AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:24:199 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0009;SUBTY=0; |
16:23:24:199 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0009;SUBTY=0; |
16:23:24:199 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0009;SUBTY=0; |
16:23:24:199 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0009;SUBTY=0; |
16:23:24:199 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0009;SUBTY=0;AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:24:200 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0009;SUBTY=0;AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:24:200 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0009;SUBTY=0;AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:24:280 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0016;SUBTY=' '; |
16:23:24:280 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0016;SUBTY=' '; |
16:23:24:280 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0016;SUBTY=' '; |
16:23:24:280 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0016;SUBTY=' '; |
16:23:24:280 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0016;SUBTY=' ';AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:24:280 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0016;SUBTY=' ';AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:24:280 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0016;SUBTY=' ';AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:24:303 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0019;SUBTY=09; |
16:23:24:303 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0019;SUBTY=09; |
16:23:24:303 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0019;SUBTY=09; |
16:23:24:303 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0019;SUBTY=09; |
16:23:24:303 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0019;SUBTY=09;AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:24:303 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0019;SUBTY=09;AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:24:303 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0019;SUBTY=09;AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:24:303 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0019;SUBTY=14; |
16:23:24:303 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0019;SUBTY=14; |
16:23:24:303 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0019;SUBTY=14; |
16:23:24:303 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0019;SUBTY=14; |
16:23:24:303 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0019;SUBTY=14;AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:24:303 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0019;SUBTY=14;AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:24:303 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0019;SUBTY=14;AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:24:567 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0041;SUBTY=' '; |
16:23:24:567 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0041;SUBTY=' '; |
16:23:24:567 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0041;SUBTY=' '; |
16:23:24:567 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0041;SUBTY=' '; |
16:23:24:567 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0041;SUBTY=' ';AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:24:567 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0041;SUBTY=' ';AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:24:568 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0041;SUBTY=' ';AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:24:885 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0065;SUBTY=' '; |
16:23:24:886 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0065;SUBTY=' '; |
16:23:24:886 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0065;SUBTY=' '; |
16:23:24:886 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0065;SUBTY=' '; |
16:23:24:886 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0065;SUBTY=' ';AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:24:886 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0065;SUBTY=' ';AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:24:886 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0065;SUBTY=' ';AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:24:925 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0069;SUBTY=' '; |
16:23:24:925 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0069;SUBTY=' '; |
16:23:24:925 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0069;SUBTY=' '; |
16:23:24:925 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0069;SUBTY=' '; |
16:23:24:926 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0069;SUBTY=' ';AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:24:926 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0069;SUBTY=' ';AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:24:926 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0069;SUBTY=' ';AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:27:103 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0302;SUBTY=' '; |
16:23:27:103 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0302;SUBTY=' '; |
16:23:27:103 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0302;SUBTY=' '; |
16:23:27:103 | AUTH | - - - | P_PERNR RC=0 | AUTHC=W;PSIGN=E;INFTY=0302;SUBTY=' '; |
16:23:27:103 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0302;SUBTY=' ';AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:27:103 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0302;SUBTY=' ';AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:27:103 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0302;SUBTY=' ';AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:28:347 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0439;SUBTY=1001; |
16:23:28:347 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=E;INFTY=0439;SUBTY=1001; |
16:23:28:347 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=I;INFTY=0439;SUBTY=1001; |
16:23:28:347 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0439;SUBTY=1001;AUTHC=W;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:28:347 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=*;INFTY=0439;SUBTY=1001; |
16:23:28:347 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=E;INFTY=0439;SUBTY=1001; |
16:23:28:347 | AUTH | - - - | P_PERNR RC=4 | AUTHC=W;PSIGN=I;INFTY=0439;SUBTY=1001; |
16:23:28:347 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0439;SUBTY=1001;AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:28:348 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0439;SUBTY=1001;AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:28:348 | AUTH | - - - | P_PERNR RC=4 | AUTHC=S;PSIGN=*;INFTY=0439;SUBTY=1001; |
16:23:28:348 | AUTH | - - - | P_PERNR RC=4 | AUTHC=S;PSIGN=E;INFTY=0439;SUBTY=1001; |
16:23:28:348 | AUTH | - - - | P_PERNR RC=4 | AUTHC=S;PSIGN=I;INFTY=0439;SUBTY=1001; |
16:23:28:348 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0439;SUBTY=1001;AUTHC=S;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:28:348 | AUTH | - - - | P_PERNR RC=4 | AUTHC=S;PSIGN=*;INFTY=0439;SUBTY=1001; |
16:23:28:348 | AUTH | - - - | P_PERNR RC=4 | AUTHC=S;PSIGN=E;INFTY=0439;SUBTY=1001; |
16:23:28:348 | AUTH | - - - | P_PERNR RC=4 | AUTHC=S;PSIGN=I;INFTY=0439;SUBTY=1001; |
16:23:28:348 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0439;SUBTY=1001;AUTHC=S;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:28:348 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0439;SUBTY=1001;AUTHC=S;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:28:348 | AUTH | - - - | P_PERNR RC=4 | AUTHC=E;PSIGN=*;INFTY=0439;SUBTY=1001; |
16:23:28:348 | AUTH | - - - | P_PERNR RC=4 | AUTHC=E;PSIGN=E;INFTY=0439;SUBTY=1001; |
16:23:28:348 | AUTH | - - - | P_PERNR RC=4 | AUTHC=E;PSIGN=I;INFTY=0439;SUBTY=1001; |
16:23:28:349 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0439;SUBTY=1001;AUTHC=E;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:28:349 | AUTH | - - - | P_PERNR RC=4 | AUTHC=E;PSIGN=*;INFTY=0439;SUBTY=1001; |
16:23:28:349 | AUTH | - - - | P_PERNR RC=4 | AUTHC=E;PSIGN=E;INFTY=0439;SUBTY=1001; |
16:23:28:349 | AUTH | - - - | P_PERNR RC=4 | AUTHC=E;PSIGN=I;INFTY=0439;SUBTY=1001; |
16:23:28:349 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0439;SUBTY=1001;AUTHC=E;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:28:349 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0439;SUBTY=1001;AUTHC=E;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:28:349 | AUTH | - - - | P_PERNR RC=4 | AUTHC=D;PSIGN=*;INFTY=0439;SUBTY=1001; |
16:23:28:349 | AUTH | - - - | P_PERNR RC=4 | AUTHC=D;PSIGN=E;INFTY=0439;SUBTY=1001; |
16:23:28:349 | AUTH | - - - | P_PERNR RC=4 | AUTHC=D;PSIGN=I;INFTY=0439;SUBTY=1001; |
16:23:28:349 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0439;SUBTY=1001;AUTHC=D;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:28:349 | AUTH | - - - | P_PERNR RC=4 | AUTHC=D;PSIGN=*;INFTY=0439;SUBTY=1001; |
16:23:28:349 | AUTH | - - - | P_PERNR RC=4 | AUTHC=D;PSIGN=E;INFTY=0439;SUBTY=1001; |
16:23:28:349 | AUTH | - - - | P_PERNR RC=4 | AUTHC=D;PSIGN=I;INFTY=0439;SUBTY=1001; |
16:23:28:349 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0439;SUBTY=1001;AUTHC=D;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:28:349 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0439;SUBTY=1001;AUTHC=D;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
16:23:28:349 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0439;SUBTY=1001; |
16:23:28:349 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0439;SUBTY=1001; |
16:23:28:350 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0439;SUBTY=1001; |
16:23:28:350 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0439;SUBTY=1001;AUTHC=R;PERSA=;PERSG=;PERSK=;VDSK1=; |
16:23:28:350 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=*;INFTY=0439;SUBTY=1001; |
16:23:28:350 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=E;INFTY=0439;SUBTY=1001; |
16:23:28:350 | AUTH | - - - | P_PERNR RC=4 | AUTHC=R;PSIGN=I;INFTY=0439;SUBTY=1001; |
16:23:28:350 | AUTH | - - - | P_ORGIN RC=0 | INFTY=0439;SUBTY=1001;AUTHC=R;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:28:350 | AUTH | - - - | P_ORGIN RC=4 | INFTY=0439;SUBTY=1001;AUTHC=R;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
06-19-2012 12:32 PM
Hi Debbie,
Thanks for providing the trace results. From the trace results, looks like there are couple of authorization failures for IT0439.
Can you add the following authorization to IT0439 & confirm if it resolves the issue?
Debbie Sydney wrote:
16:23:28:348|AUTH | - - - |P_ORGIN RC=4 |INFTY=0439;SUBTY=1001;AUTHC=W;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; 16:23:28:348|AUTH | - - - |P_ORGIN RC=4 |INFTY=0439;SUBTY=1001;AUTHC=S;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; 16:23:28:349|AUTH | - - - |P_ORGIN RC=4 |INFTY=0439;SUBTY=1001;AUTHC=E;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; 16:23:28:349|AUTH | - - - |P_ORGIN RC=4 |INFTY=0439;SUBTY=1001;AUTHC=D;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; 16:23:28:350|AUTH | - - - |P_ORGIN RC=4 |INFTY=0439;SUBTY=1001;AUTHC=R;PERSA=0002;PERSG=C;PERSK=CR;VDSK1=9000; |
Thanks
Sandipan
06-20-2012 9:02 AM
Hi Sandipan,
Our users who need to delete do have access to IT0439 with full update access in P_ORGIN. Further investigation has shown that this infotype is a 'data migration' infotype that our BW system 'generates' when HR data is migrated into BW for BW reports. The migration occurs every evening then after a payroll run. This may be why all Qa testing we have done is successfull and we cannot re create the error in QA.
We do follow the principle of if a user has full update access to an infotype then that infotype will also be included in P_PERNR so a user cannot update their own record, but we don't have this infoype set in this way for P_PERNR which also appears as a fail on the trace. I can only assume that it was not included in P_PERNR as it is not an infotype that is used by users for updating data.
I think we will have to try putting it into P_PERNR and see if this works ( might have an effect on BW migration?) unless you know of anything else
Many thanks for all your help
Debbie
06-20-2012 9:40 AM
Hi Debbie,
Debbie Sydney wrote:
We do follow the principle of if a user has full update access to an infotype then that infotype will also be included in P_PERNR so a user cannot update their own record, but we don't have this infoype set in this way for P_PERNR which also appears as a fail on the trace.
If you follow such a principle then IT0439's 'include' access can be added via P_PERNR. However, authorization for P_PERNR is not essential in your case where user is trying to delete someone else's personnel number.
As I mentioned earlier, P_PERNR check is done first just to verify if user is authorized to access PA data (i.e any particular infotype) maintained for his/her own personnel number, once that fails P_ORGIN authorization is checked to verify if that user is authorized to access PA data maintained for someone else's personnel number.
In your case, I wonder if you have provided full P_ORGIN authorization for IT0439 then why the RC=4 appear as highlighted in my earlier post & without any subsequent RC=0 for same infotype.
The pattern for IT0439 in trace should be something like this:
16:23:27:103|AUTH | - - - |P_ORGIN RC=0 |INFTY=0302;SUBTY=' ';AUTHC=W;PERSA= ;PERSG= ;PERSK= ;VDSK1= ; |
16:23:27:103|AUTH | - - - |P_ORGIN RC=4 |INFTY=0302;SUBTY=' ';AUTHC=W;PERSA=*;PERSG=*;PERSK=*;VDSK1=*; |
16:23:27:103|AUTH | - - - |P_ORGIN RC=0 |INFTY=0302;SUBTY=' ';AUTHC=W;PERSA=0002;PERSG=C |
Can you please re-check the P_ORGIN authorization node for IT0439 in your role, reset user buffer via tcode SU56, run user comparison on the user ID and then test one more time?
Thanks
Sandipan
06-20-2012 11:41 AM
Hi Sandipan,
Thanks again for this, The role that has full access to IT0439 is set as follows
AUTHC *
INFTY 0439.9008
PERSA defined personnel areas ( not0002)
PERSG *
PERSK *
SUBTY *
VDSK1 *
There are some entries of RC= 0 for IT0439 above on P_ORGIN but follow a slighlty different pattern as they seem to follow P_PERNR AUTHC ,W,S,E,D,R,
I note that that personnel area that is it failing on in this example in 0002 which is not included in this role as stated above, but the user has access to personnel area 0002 in other roles they have so should be picked up from here.
I am asking the section concerned to contact me so I can run a few more traces
thanks for your help
Debbie
06-20-2012 11:52 AM
Hi Debbie,
I am sure you already are aware of this but still I would like to emphasize, authorization fields of P_ORGIN (or any other authorization object) follows 'AND' logic and hence PERSA=0002 and INFTY=0439 has to be contained in the same P_ORGIN node/instance in any of the roles so that the user can pass theis authorization check. Fields of two different P_ORGIN instances won't be combined.
Goodluck with the trace. Please let me know what you find.
Thanks
Sandipan
06-20-2012 12:01 PM
Hi Sandipan,
Thank for this, sometimes have a 'blank' moment but the discussions with you were not wasted, nice to have confirmation form a ''third party' at times.
I will let yo know if you like how we get on, may not be for a few weeks though as we are patching at tthe moment and having probelms with SRM
thanks again
Debbie
06-20-2012 12:06 PM