Question:
We have set up our authorizations so that Managers can access details
and expenses for their employees, but not have any access to those
employees superior to the manager or do not report to him in the Org
Structure.
We are using structural authorizations and have assigned a position
number to the relevant manager using OOSP/OOSB and they appear to be
working OK, i.e. using PA30 the manager can only view his staff.
However, when using PR05 for Expenses/Trips our Managers can access the
whole of the organization! Where have we gone wrong?
I know the trip authorizations use authorization object P_TRAVL in PFCG
do these need to be set up differently, as I was told that the
structural authorizations would work in this area.
Answer:
Hi !
We're facing the same problem.
Has anybody found an answer to this issue since the original post was barried under a pile of new issues in 2003 ?
_________________
Regards
Trygve
Answer:
Perhaps PR05 bypasses structural authorizations?
Answer:
Use BADI in OSS Note 574467 - User exit: Personnel number validation