Question:
Are there any general rules for where a given infotype should be inserted in the authorization objects P_PERNR P_ORGIN AND PLOG?
How does an administrator know where to insert a given infotype when using the Profile Generator, for example?
Any assistance you can provide would be greatly appreciated.
Answer:
Hi
I may be stating the obvious - but Infotypes should be inserted in the feild INFOTYP for PLOG and INFTY for P_PERNR & P_ORGIN.
Generally P_PERNR & P_ORGIN infotypes deal with PA module - so ones like 0001, 0002, 0008 etc.
Generally PLOG infotypes come from the OM or PD modules and normally begin from 1000. So 1001, 1002, 1007 etc.
The best way to determine what infotype is required is to work with the business team to determine what infotype the user (and role) will need access to. Failing that - run a trace (ST01) and see what Infotypes are called when running a Txn.
**Be warned however that in HR, the trace will show a large number of records and they are not ALL needed to run the Txn - you need to work through the trace and determine what is required*** I normally do this by sitting with an HR bod and asking them what the Infotype is and should the user have access to it.
Have a look at the links below and see if that helps.
http://help.sap.com/saphelp_47x200/helpdata/en/94/b8b83b5b831f3be10000000a114084/frameset.htm
http://www.sap-img.com/human/main-hr-authorization-object-for-security.htm
Answer:
Thank you this helps!
Answer:
**Be warned however that in HR, the trace will show a large number of records and they are not ALL needed to run the Txn - you need to work through the trace and determine what is required***
As well as the trace being abundant in reporting checked infotypes, SU53 is also a bad companion in the HR module as it'll report missing infotypes even when your auths are set up properly.
The point is that a transaction like PA30 builds the screen tabs an sets the fields based on your authorizations. It will therefor check a large amount of infotypes at transaction start and I believe sometimes even when switching from tab to tab.
I second Mike's advice to sit beside a functional consultant for this one.
Jurjen