ADHOC Query Authorization
Hi Experts,
How authorization can be assigned to a query created by PAAH transaction (adhoc query).
If a query is created by particular user/user group, it should not be altered by other user / user group.
Please advice.Thanks in Advance.
Regards,
IFF
Hello,
Through P_PERNR we could restrict the authorisations for adhoc query for a particular user.
Using the employee sbu group field value found under the P_ORGINCON authorisation object we could restrict the authorisations for a particular group of users.
Hope this answers your query.
Kindly let me know if you need any further help in this regards.
Pramathesh.
Similar Messages
-
Authorizations for adhoc query
Hi all,
I am facing a problem with authorization on adhoc query. The following is what I am trying to achieve: Power Users are able to design a query but they are only allowed to save the query with the prefix "p_"
In PFCG I have set this up in s_rs_comp and s_rs_comp1 but I am still able to save the query under z_...... The role I have setup is quite plain, it has s_rfc, s_tcode, s_rscomp,
s_rscomp1 en s_rsicube. Have I forgot to setup something else?
anyone any idea?
mcteamHello James,
I am trying to make it so my users can only save queries with the prefix "Y" I guess my problem is sort of the reverse of yours.
My SDN thread is:
Only save queries if name starts with Y
if you can help it'd be great!
Thanks,
Nick -
Logical database in adhoc query
Hello All,
Can anyone tell me what is the logical database in adhoc query?Hi
When you create a query , you have to select an infoset. Infoset can be considered as a source from which data is populated in the Query Fields.
Infosets are created from Transaction SQ02.
There can be four methods through which an Infoset can become a source of data:
1. Table join ( By joining two or more tables from Data dictionary)
example: Joining tables PA0001 and PA0006 on Pernr to get a one resultant dataset
2. Direct read of Basis Table ( Like PA0001 as a source for data in Infoset )
3. Logical Database ( A Pre-written Program by SAP that extract data from clusters, tables taking care of authorizations and validity periods)
Example : Logical database PNP, PNPCE (Concurrent Employement),PCH ( LDB for Personnel Development Data)
Custom Logical DBs can be created in T_Code SE-36.
4. Data Retrieval by a Program ( Custom code written by ABAP developers which will collect and process data) . This program has a corresponding Structure in data dictionary and the fields of this structure will be used in query)
Reward Points, if helpful.
Regards
Waseem Imran -
ADHOC Query in Production System
Can I create a ADHOC query in Production system?Coz I can able to do that.
Thanks
SriramThis is the practice:
1. The project team will build all the reports defined in the project plan, test and transport to production. These queries usually will be set not to be changed.
2. SUper users will be granted authorization to create their own queries, modify their own queries and delete their own queries. For this the auth object S_RS_COMP1 is used.
3. All the other users will be granted to access reports.
Ravi Thothadri -
Adhoc Query report not working fine
Hi,
We have a customized infotype 9222 which stores the previous experience of the employees.
Now I have created a adhoc query in which I have added this infotype.The problem which I am facing is when I put the Indian company codes and run the report, the report is working fine . But when I put a Ukraine Company Code and then run the report ; the report does not picks the experience details of the employees and it shows Zero Yrs and Zero months.
I have checked in PA30 the experience details are maintained for the Ukraine employees.
Is their any setting in the system which allows the infotype for a particular company? or what may be the reason for the strange behaviour of the report towards a specific compant code. Please reply asapHi ,
Pls check do you have authorization or not for to create Object Directory entry.
Thanks and Regards,
Revathi. -
Hi SAPients..
I have a n issue in Adhoc Query
In Adhoc query report ( PQAH ), X person having authorization to see the folder Additional Personal Data (IT0077), but Y person can access the Adoc but could not see the folder (IT0077). Please guide what should I do to make the Y person can view the (IT0077) folder??
Appreciate your support on this, Please guide me.
ShanHi Shan,
What I undertand is as follows:
Person is having access to view IT77 and Y person is having access to t code - PQAH (Ad Hoc Reprot). you want to give Y person access of IT77.
In this case you would need to add the concerned role to y person's SAP user id by which he ll get acces to maintain IT77 ands also can download the report. The role name you can get from your security team or GRC team.
Hope this solves your query.
Sarang Kulkarni -
dear all,
I have setup a new role and made adhoc query for users to be able to maintain, change etc......
You can set up authorizations in such a way, that certain end-users in a user group are authorized to maintain and execute queries, while other members of the same user group are authorized only to execute existing queries."
the above statement, states other memebrs can be setup to execute only?
what must I do to make the endsers allow them to execute the query only?
for the first set of users i have within object S_QUERY made them to use change, maintain and translate.
thanks allThere is info here: http://help.sap.com/SAPHELP_NW70EHP1/helpdata/EN/de/45daf69ef111d195050000e82de14a/content.htm and here: http://help.sap.com/saphelp_46c/helpdata/en/de/45daf69ef111d195050000e82de14a/content.htm
Users with S_QUERY actvt=02 can move between infosets with no problem. If you are removing this then you need to specify which infosets are assigned to a user group and which users are assigned to the user group. If you have lots of users and queries already then this may be a big piece of work and illustrates why use of queries may save time for one team (developers) but give more work for others. -
I came across a situation in the course of my job that certain people are able to execute S_PH0_48000513 (HR Adhoc Query) without being added to the User Group. This was surprising.
Can any of you tell me if this is because what security settings ? I am not sure if this could be some settings with auth object S_QUERY .
Acccording to the http://www.insightcp.com/res_15.htm it should not work if they are not added to any uset group. But in reality it is otherwise.
Any thoughts on this , also if anyone can explain how security in Adhoc Query works , that would also be wonderfulHi,
Most pobably these users are assigned with a role wherein they are assigned with the value S_PH0_48000513 under the auth object s_tcode or with the authorization object s_querry.
Check this.
Go to tcode S_BCE_68001397.
In the Authorization tab enter value S_TCODE
click ENTRY VALUES button
In the next screen in the values field enter S_PH0_48000513
and execute.
It will show you which users are able to execute the said tcode
Similarly check which users/roles are assigned with the auth object s_querry.
In the roles assigned to the said users check if the r assigned with profile sap_all or sap_new profile.
Or in the roles assigned to them the auth object S-Tcode containf the value S_PH0_48000513 or * OR
if there is an authorization object s_querry.
Note * means he is authorised to all tcodes.
If the auth object s_querry exists make it inactive.
A detailed analysis of the roles can give the way to regulate .
If resolved dont forget to award few points.
Regards -
Dear All,
When i am running adhoc query for a particular infotype iam getting fine.
My issue is iam not getting the start and end date of the record.
can any body help me out how to get the start date and end date of each record.
Thanks in advance
Regards
Ananya.KHi,
If you want to add the dates to the output of the querry, While creating/editing the query, you should add feilds ENDDA and BEGDA for the infotype to get the start and end date correct.
If this does not answer your question, could you explain your query in detail?
Thanks,
Dhiraj -
Problem in Adhoc Query's set operation functionality.
Hi Experts,
I am facing problem executing Adhoc Query's set operation functionality.
In Selection Tab, following operations are performed :-
Execute a query and mark it as 'Set A'.(Say Hit list = X)
Execute another query and mark it as 'Set B'.(Say Hit list = Y)
In Set operation Tab, following operations are performed :-:-
Carry out an Operations 'Set A minus Set B'.
which results in Resulting Set = Z.
Transfer the resulting set 'in hit list' and press the copy resulting set button.
In Selection Tab, Hit list is populated with Z.
And when output button is pressed, I get to see 'Y' list and not 'Z' list.
Kindly help.
Thanks.
YogeshHi Experts,
I am facing problem executing Adhoc Query's set operation functionality.
In Selection Tab, following operations are performed :-
Execute a query and mark it as 'Set A'.(Say Hit list = X)
Execute another query and mark it as 'Set B'.(Say Hit list = Y)
In Set operation Tab, following operations are performed :-:-
Carry out an Operations 'Set A minus Set B'.
which results in Resulting Set = Z.
Transfer the resulting set 'in hit list' and press the copy resulting set button.
In Selection Tab, Hit list is populated with Z.
And when output button is pressed, I get to see 'Y' list and not 'Z' list.
Kindly help.
Thanks.
Yogesh -
Hi All,
This is regarding a problem in the adhoc query.
For one adhoc query in the selection field only personnel number is there. The adhoc query selects from 0022-infotype.In this case if the reporting period is ALL, all infotype records belonging to 0022 infotype are selected. Even if the end date of the infotype record is less than the initial date of Org.assignment.
For the second adhoc query in the selction field only
personnel area is there. In this case the adhoc query doesnot select infotype record belonging to 0022 infotype
if the end date of the infotype record is less than the Org.assignment.
Can anyone explain me this strange behaviour.
Points will be rewarded.
Regards,
AravindSome more additional info about the problem.
Suppose in the selection screen there are 4 fields
Company code, Personnel area, Personnel sub area and Personnel number.
If you fill both Personnel subarea and personnel number,
data record belonging to education infotype but whose end date is greater than the start date of Org.assignment
infotype is not selected.
But if you fill only personnel number the same data record belonging to education infotype is shown with blank values for Org.assignment.
I tried debugging and found out that in the first case
since there is no Org. assignment record for the time period of the education infotype nothing is shown.
In the second case, it is allowed to be shown with blank values for Org.assignment.
Any explanation for this behaviour? -
Additional field in adhoc query
Hi all, I need to be able to report on the IT105 subtype 0001 system ID for employees who are withdrawn from the company, however, when someone leaves their IT105 record is delimited so adhoc query will not output anything. Has anyone coded an additional field that will look at the latest record regardless of the date?
If you have, please can you share the code with me!?
Many thanks!Hi Tanya ,
Please find the code below. It is designed for additional structure z105_last which is bassed on P0105 type.
data l_it_p0105 type standard table of p0105.
clear: l_it_p0105, z105_last.
call function 'HR_READ_SUBTYPE'
exporting
tclas = 'A'
pernr = peras-pernr
infty = '0105'
subty = '0001'
begda = '18000101'
endda = pn-endda
tables
infty_tab = l_it_p0105
exceptions
others = 1.
if sy-subrc = 0.
describe table l_it_p0105.
read table l_it_p0105 into z105_last index sy-tfill.
endif.
Regards,
Sergey -
Hi All,
Im have created a data source with table joins T001W and T134M.
Filed MANDT has been maintained when the join condition has been established at Data source level.
Adhoc query in business rule identifies the deficiency. But some filed in the result has blank entry.
Attached the screen shot for your reference.
Can you please let me know, how to fix the blank entry issue.
Thanks
Ashok SHello Ashok,
In this case, you have foundation and plug-in in both systems. I assume you have set data source and business rules in GRC system, am I right?
If this is the case, you might have several problems as before SP 10 for GRC 10.0, backwards compatibility was not implemented yet. It means that you must follow SAP note 1352498 in order to synchronize your systems.
If this is not the case, have you checked these values in SCU3 in ECC system?
Best Regards,
Fernando -
Can we call a function module in ADHOC query
Hi
Can we call a function module in ADHOC query if yes how.
Also we ned to know how to call a function module in SAP query.
An early responce is appreciated.
Thanks and best regards
RajeevOkay as far as I understand your aim is:
To fill a field in the output list with a value that is based on the current line information and calculated by a function module
So go to SQ02 and create an additional field in the InfoSet.
You can refer in the coding to the technical names you can see in the left tree window like P0000-PERNR.
More information is avaiable in the Help part look for additional field in SQ02.
Regards,
Michael -
System unable to read table in Adhoc Query
Hi Experts,
I am trying to extract a report based on Infotype 0022 through Adhoc query. Even after maintaining data for IT0022 for a few employees the system is unable to read the educational details of those employees.
I am unable to trace the defect . can anybody please tell me what could be the reason. I have checked the table PA0022, there the data is been stored.
Thanks & Regards,
SmithaHi paul and experts
actuall im reading data from 0022 infotype . im using macro
rp_provide_from_last p0022 '11' pn-begda pn-endda.
no data found for this.
but in pa30 for that particular employee data is there.
please help me out of this.
thanks a lot
Maybe you are looking for
-
I'm running XP. What else do you need to know except that I keep getting the XULRunner error? I've even removed it from the system (through the control panel function) and reinstalled - also rebooted.
-
I have previously purchased songs that I can no longer download
I Have songs that we're working fine on my iPhone up until the last sync. When I went to try and download them again they are greyed out. Also parts of another album are missing., 3 songs, and they are also greyed out. I then went in and was goin
-
Accented characters do not display correctly if there is a variable beside it
Hello, We are experiencing a problem when we have text with accented characters an a variable beside it within the same text box. The problem is that the accented characters in the text do not display correctly in the preview or publised course to Fl
-
I just updated my Sony Live with Walkman to ICS, after I turn it on, the bottom of the screen keep displaying "Safe Mode" How should I get rid of this???? Help???? It's annoying!
-
Join two tables with the same information
I have a registration database. It references two other tables. I accept registrations from Faculty and from Students, but their information is in two different tables. Both have fname and lname. If they have people_id filled in, I want the fname and