Question:
Hello
All our users for SAP HR are classified into employee sub-groups, I was contacted by a user on Friday to say that she was able to view data for colleagues within one of the restricted sub-groups.
I checked the security roles and these have them excluded in the employee sub-group field in P_ORGIN so I re-generated the roles and set up a test user and sure enough you can view all the data.
I can't see what causing this, i've created a new role and user but it still lets you view the information in the sub-types. Anyone got any ideas what might be causing this or where I can look?ld ask the forum as well.
Thanks
Answer:
I found the problem it was in the HR_Reporting fields. They had no restrictions for HR Master data (P_Orgin) so were looking at all info even that which was excluded