Question:
Hello,
I have a problem, hopefully can get some help here :)
I have a user which needs to execute the Leave Quota Generation program, somehow this program requires access to infotype 0008. But in actual fact, this user should not be able to see the information in the infotype. She has access to PA20/PA30 for some other infotypes but not infotype 0008.
Does anyone know how we can setup this type of access, where she is able to run the leave quota program and PA20 but not able to see infotype 0008.
Thanks in advance for your help.
Answer:
This is what the object P_ABAP was invented for. Give them access to this specific report (do not put an * in the report field) with the other field (forget its name off the top of my head) as a value 2 and you will be all set. No need to give Infotype authority for this user for this report.
_________________
bwSecurity
Answer:
The HR report should be checking P_ABAP, there is a value you can set to "run program without infotype check" so youcan let them run the program and not see IT0008 in PA20.
Run a ST01 trace to verify the values needed.
Answer:
This is what the object P_ABAP was invented for. Give them access to this specific report (do not put an * in the report field) with the other field (forget its name off the top of my head) as a value 2 and you will be all set. No need to give Infotype authority for this user for this report.
Instead of a 2 put an * in this degree of simplification field.
_________________
bwSecurity
Answer:
The affected report to put in P_ABAP is probably RPTIME00 and yes as the others said degree of simplification is 2
We first experienced this problem when we went live with Payroll and sAP were no help, they said...
"Hello Sandi,
The projection in txn PT50 calls program RPTIME00. The program reads infotype 0008 so I think R authorization for infotype
0008 is required to execute projection via PT50. I don't think there's a customer exit to skip this authorization check.
If the CATS admin. user don't have authorization to access to infotype 0008 of the EEs in his team, I don't think it makes sense he executes leave projection for them. The system use some information from infotype 0008 in RPTIME00 so whoever runs this program should have the authorization to access infotype 0008."
As far as SAP is concerned you should have access to pay data to run time projections. Our stance was that time approvers need access ot leave data but don't know need to know an individual's pay rate. SAP did not even suggest the P_ABAP solution, we had to find it for ourselves.
Best of luck.
The solution above worked for us.
_________________
Sandi
~~~~
Apparently Father Christmas, the Easter Bunny, the Tooth Fairy and Star Wars aren't real
Tuly kiwi.
Answer:
You may try with the object P_PERNR
keeping fields PSIGN=E, and INFTY=0008
John plz comment
Answer:
You may try with the object P_PERNR
keeping fields PSIGN=E, and INFTY=0008
P_PERNR isn't used for this purpose. The authorization you are specifying will (if IT 105 is set up and P_PERNR is activated) allow the user to see everyone's salary except his own.
Answer:
Hello All,
Thanks for your help. In the end, the customers requires infotype 0008 access as well. That solve all the issue.
Thanks!