Check for authorized employee

Hi experts,
I have a doubt regarding the check of employee authorization. That is, we are providing 2 reports for MSS user in portal. The MSS user can view only those employees who reports to him. But, in addition to this, we need to filter only the authorized employees, not all the employees.
I want to know how to check whether an employee is authorized employee. what is the user of the function module 'HR_CHECK_AUTHORITY_PERNR'?

If this happens to your .Mac account only, try rebuilding the mailbox, i.e. select it and do Mailbox > Rebuild.

Similar Messages

W2 process & Final Check for Terminated employee (Payroll)

-- how to create a Final Check for Terminated Employee ?
--- How are W2 processed?
thanks

Hi Arun,
You need to delimit IT0588 sty 0001... . till 19.2.2014.... (i.e separation date)
e.g
Joining date 1.1.2010
Termination date :- 19.2.2014...
Delimit the info type with period as 1.1.2010 to 19.2.2014...
Hope this should solve your issue...
Regards,
Veeram

Checking for authorized computers

Hello,
I have 2 questions today:
1) How can I check to see how many computers I have authorized to play my iTunes?
2) I recently tried to move some of my music onto my wife's computer using a data disk. Everything transfered fine except for the songs that I purchased from the iTunes store - I sort of expected this. So how do I get those songs to play on her computer? She already has iTunes on her computer and I brought all of the music into HER iTunes - the protected AAC files being the exception. Should I somehow authorize her computer 1st and THEN bring the over the protected files?
Thanks for any help!

the songs I copied into my wife's iTunes should be on her computer with the rest of the other "unprotected" tracks
Yes. In iTunes, File -> Add folder (or files)to iTunes library.
it's just that I can't access it until I try to play the song and then authorize the computer.
You can access it jst fine.,When you try tp play it. iTunes will tell you the computer is not authorized. Simply put in the your iTunes account and password to authorize the computer and the songs will play fine.

Absences not deducted from Absence Quota for One Employee

Dear Friends,
I am facing an issue for one employee, when I recorded an Annual Leave absence to him, it is not updated in his Absence quotas infotype. But this is working fine for all other employees in the same employee group/subgroup grouping.
But for Sick Leave absence type, it is updating in his absence quota records...
I have checked the counting rules, deduction rules, base entitlement rules and other configuration settings.......It is fine and for other employees belonging to the same grouping, it is working fine, except this employee...
I couldn't understand what will be the reason? Can anyone shed light on this issue?
Thanks in advance,
Sai Narayana,
SAP Functional Consultant.

Hi JS,
I am checking the absence is deducted or not from his entitlement in the infotype 2006 after running the payroll for that month......
The employee has taken leave on last month and the payroll is also run for that month.......This Absence is not deducted from his quota......
I have checked for another employee in this department, no error/issue with that employee.......Only with this employee I am facing problem.....
I found -
1. The Absence Quota balance which is present in Infotype 2006 is not the same which is displayed in Remuneration Statement ( leave balance is displayed in payslip for every employee)
2. Annual leave is not deducted from the employee's entitlement where as sick leave is deducted. I have checked the deduction rule too for this grouping, it is right.No issues in that.
3. Absence Quota generation also produced different results when run time evaluation thru PT60.....which is not according to the entitlement to this employee grouping that too for this employee only.
Or Friend, can you tell me some other option, to overcome this issue.....instead of repairing this all the time.......
Thanks,
Sai

I cannot access any of my old purchases. Movies, mainly. It has nothing to do with authorized accounts, I've checked for available downloads a thousands times over. They simply do not exist any longer.

Well, this has been going on for a long time and I've had my absolute fill of it tonight.
I have purchased a large collection of movies from iTunes that for mainly the reason that I have a new computer, my old films no longer exist as downloaded iTunes videos. That being said, I know I should be able to download purchased films as long as they're still on the iTunes store. I cannot download any of them. Tonight I decided to buy a collection that should have allowed me to download all three films (which I had previously owned, but got sick of trying to find a solution to why I cannot redownload them). So tonight, I purchase this collection of three films, downloads the frst one. Theres absolutely no sign of the second or third film and when I select Check for available purchases it says all available purchases have been downloaded.
If this was true, 25+ movies would be available to download, least to say the two missing from tonights purchase (which I have purchased in the past as well).
My account is authorized, everything is alright with my account and I have tried multiple suggestions and am completely lost. Apple support is giving me the run-around.
What do I do?

Nevermind. I finally found a third party answer and will post it for anyone else with my problem.
>Go to the iTunes store.
>Halfway down the page, right hand side, says account
>Under account it says purchaced, select that
>Wa-la

Authority-check for particular comp code

Hi All,
when i'm using standard Authority Object F_BKPF_BUK for a particular standard code say 'CO01'. but it is working for all company code, but i want work for only one company code say 'CO01' ONLY.i'm using in report program (zreport prog)
I written code as
AUTHORITY-CHECK OBJECT 'F_BKPF_BUK'
ID 'BUKRS' FIELD 'BE10'
ID 'ACTVT' FIELD '03'.
Please can u advice on this .
Many Thanks in Advance for u r Answer
Naren

Hi
In general different users will be given different authorizations based on their role in the orgn.
We create ROLES and assign the Authorization and TCODES for that role, so only that user can have access to those T Codes.
USe SUIM and SU21 T codes for this.
Much of the data in an R/3 system has to be protected so that unauthorized users cannot access it. Therefore the appropriate authorization is required before a user can carry out certain actions in the system. When you log on to the R/3 system, the system checks in the user master record to see which transactions you are authorized to use. An authorization check is implemented for every sensitive transaction.
If you wish to protect a transaction that you have programmed yourself, then you must implement an authorization check.
This means you have to allocate an authorization object in the definition of the transaction.
For example:
program an AUTHORITY-CHECK.
AUTHORITY-CHECK OBJECT <authorization object>
ID <authority field 1> FIELD <field value 1>.
ID <authority field 2> FIELD <field value 2>.
ID <authority-field n> FIELD <field value n>.
The OBJECT parameter specifies the authorization object.
The ID parameter specifies an authorization field (in the authorization object).
The FIELD parameter specifies a value for the authorization field.
The authorization object and its fields have to be suitable for the transaction. In most cases you will be able to use the existing authorization objects to protect your data. But new developments may require that you define new authorization objects and fields.
http://help.sap.com/saphelp_nw04s/helpdata/en/52/67167f439b11d1896f0000e8322d00/content.htm
To ensure that a user has the appropriate authorizations when he or she performs an action, users are subject to authorization checks.
Authorization : An authorization enables you to perform a particular activity in the SAP System, based on a set of authorization object field values.
You program the authorization check using the ABAP statement AUTHORITY-CHECK.
AUTHORITY-CHECK OBJECT 'S_TRVL_BKS'
ID 'ACTVT' FIELD '02'
ID 'CUSTTYPE' FIELD 'B'.
IF SY-SUBRC <> 0.
MESSAGE E...
ENDIF.
'S_TRVL_BKS' is a auth. object
ID 'ACTVT' FIELD '02' in place 2 you can put 1,2, 3 for change create or display.
The AUTHORITY-CHECK checks whether a user has the appropriate authorization to execute a particular activity.
This Authorization concept is somewhat linked with BASIS people.
As a developer you may not have access to access to SU21 Transaction where you have to define, authorizations, Objects and for nthat object you assign fields and values. Another Tcode is PFCG where you can assign these authrization objects and TCodes for a profile and that profile in turn attached to a particular user.
Take the help of the basis Guy and create and use.
Reward points if useful
Regards
Anji

AUTHORITY-CHECK for KUNNR

Hi,
I am new in core abap. For my report i have to do AUTHORITY-CHECK for kunnr. I am not finding any suitable object to use. kIndly suggest.
Currently i am using the following code.
UNPACK p_kunnr TO ws_werks.
AUTHORITY-CHECK OBJECT 'M_MSEG_WWE'
ID 'ACTVT' FIELD '01'
ID 'WERKS' FIELD ws_werks.
But this is giving dump in case KUNNR contains some alphabets because of type mismatch. Kindly suggest how can i achieve the same.
Regards,
Pankaj Aggarwal

Don't use a WERKS authorization for KUNNR, did you foresee the problems that may will arise when you will manage the user authorisations and roles, this authorization is checked in many standard programs on WERKS fields.
- SU20 - Create an authorization field with data element KUNNR and check table KNA1 (or use template KNDNR, look via SE16 at table AUTHX look for authorization fields using KNA1 as a control table)
- SU21 - Create an authorization object in a Z-customer class which use this field and the ACTVT field (template W_AUFT_RMB)
- Use the new object in your program
- Give the object name to those who manage roles via PFCG
Perform some search on subject like [Creating a Customer-Specific Authorization Object|http://help.sap.com/saphelp_ish471/helpdata/EN/9e/74ba3bd14a6a6ae10000000a114084/frameset.htm]
Look also at some authorization objects like BRGRU which were intended to manage groups of customers.
Regards,
Raymond

AUTHORITY-CHECK for an defined USER

Hi,
i write a abap (protokol) which shell be started every hour. In this report i will use
an AUTHORITY-CHECK for an defined user, because i will send the protokol via email, but i have
to check if this user is allowed to see the data.
I will use this:
AUTHORITY-CHECK OBJECT 'F_LFA1_BEK'
ID 'BRGRU' FIELD '__________'
ID 'ACTVT' FIELD '__________'.
for an defined user.
Is this possible, or how can i check this in another way?
Thanks.
Regards, Dieter

Hi Eric,
i tried it like this:
UTHORITY-CHECK OBJECT 'F_LFA1_BEK'
         ID 'BRGRU' FIELD 'KRED'
         ID 'ACTVT' FIELD '03'.
BREAK-POINT.
CALL FUNCTION 'AUTHORITY_CHECK'
EXPORTING
NEW_BUFFERING             = 3
USER                      = SY-UNAME
    OBJECT                    = 'F_LFA1_BEK'
    FIELD1                    = 'BRGRU'
    VALUE1                    = 'KRED'
    FIELD2                    = 'ACTVT'
    VALUE2                    = '03'
EXCEPTIONS
   USER_DONT_EXIST           = 1
   USER_IS_AUTHORIZED        = 2
   USER_NOT_AUTHORIZED       = 3
   USER_IS_LOCKED            = 4
   OTHERS                    = 5.
BREAK-POINT.
at first breakt-point sy-subrc = 0 at second sy-subrc = 2. Can you tell why i get another sy-subrc?
is my FM-Call correct?
thanks.
Regards, Dieter

How to make Authority Check for ALVGrid?!

Hey mates,
i got the problem which is mentioned in the headline. How can i make an authority check for my ALVGrid? I mean i want to restrict special functions to the matching users ( Display, Edit, Delete mode ).
Would be cool if someone can help
Regards Basti

Hello Bastian
A simple approach would be to define three different transactions (e.g. Z_MYALV01, Z_MYALV02, Z_MYALV03) for editing/deleting, editing only and displaying only. Add the following coding to the report displaying your ALV grid:
CASE syst-tcode.
    WHEN gc_tcode_create.    " 01
      " Allow all grid functions
    WHEN gc_tcode_change. " 02
      " Suppress grid functions for deleting rows
    WHEN gc_tcode_display. " 03
      " Suppress grid functions for editing/deleting
    WHEN others.
      RETURN.
   ENDCASE.
Regards
Uwe

How to get check number for the employee's paycheck

Hello
Anyone can advise on how to get the check number for an employee's pacheck
I got employee first name,last name,GROSS salary,Tax Info,and NET salary.I need the CHECK NUMBER.
please advise
thanks
kp
Edited by: user8612301 on Dec 16, 2010 1:26 PM

Hi,
Or are you looking for this:
SELECT serial_number, paaf.assignment_number
FROM pay_assignment_actions paa, per_all_assignments_f paaf
WHERE action_status = 'C'
AND paaf.assignment_id = paa.assignment_id
AND serial_number IS NOT NULL
AND SYSDATE BETWEEN paaf.effective_start_date AND paaf.effective_end_date;
- Viky
Edited by: Viky on Dec 17, 2010 11:42 AM

Function module for se16 with out authority check for se16

Hi ,
I am creating a tode YSE16 which has same functionality as SE16 but having its own authority check. I am calling a function module RS_TABLE_LIST_CREATE function module to get the functionality of SE16. But is there any way that i can get the function module which do not check for the authorization for se16 and execute my tcode.
Regards,
Sri.

Hi Sri,
If I am not wrong this is the question?
Guys , Sri is modifying the YSE16 as per this requirement. Do u have some other solution? Thanks.
Requirement is to create customized tcodes YSE16, YSM30 and YSE38 for se16, sm0 and se38. Lets start with YSE16.
Client want YSE16 tcode to restrict users based on some tables within a authorization group or even * value for auth group field.
SE16 restricted on:
S_TABU_DIS
Auth Group and Activity
As per Requirement YSE16 tcode sld be restricted on :
Y_TABU_DI2 (customized object)
Auth Group, Activity and Table name
We dont want to give SE16 to users in Production. So basically requirement is to restrict users on table name with YSE16 irrespective on authorization group. User sld only be able to access the table mentioned in Table name field.
so Srilu is trying to modify the Program. Can you please suggest some other way to modify it.
Thanks.
Regards,
Naveen Dalal

Authority-Check for Sales Document Type

Hi All...
I would like to incorporate Authority-Chack for the field Sales Document Type "TVAK-AURT"...
Can any one give me the sample code or exact code..?
I have written Authority-check for Sales Organization as follows...
authority-check object 'V_VBAK_VKO'
                 id 'VKORG' field i_sales-vkorg
                 id 'VTWEG' field '00'
                 id 'SPART' field '00'
                 id 'ACTVT' field '03'.
        if sy-subrc ne 0.
        delete i_sales.
BUT HOW TO WRITE FOR V_VBAK_AAT..??

Please check object: <b>V_VBAK_AAT</b> for the same.
EG:
authority-check object 'V_VBAK_AAT'
id 'AUART' field L_AUART
id 'ACTVT' field '03'.
Kind Regards
Eswar
Message was edited by: Eswar Rao Boddeti

Authority Object? Authorization Check for Period

We consolidated from R3 to SEM tax reporting. So we now are using a different authority-check object. However, all of the parameters that were in the 'Authorization Check for Period' in R3 are not in SEM. Can you manually add parameters for to the authority-check. I am not even sure how to change or activate. Is this a Basis thing?
To be honest I do not know what this object checks when processing. It cannot be debugged?
I do not think my authorization level will be fully defined with the new object.
Any suggestions?
          Thanks.
*In old ERP we used*
AUTHORITY-CHECK OBJECT 'E_CS_PERMO'
   ID 'PERMO' FIELD '1'   "Open period
   ID 'DIMEN' FIELD g_dimen
   ID 'RVERS' FIELD g_rvers
   ID 'BUNIT' DUMMY
   ID 'CONGR' FIELD g_congr.
In new SEM system we now need to use:
AUTHORITY-CHECK OBJECT 'R_UC_PERIO'
           ID 'ACTVT'     FIELD 'PA'          "open period
           ID 'CONS_AREA' FIELD g_congr.
          ID 'TASK_FLD1' FIELD '__________'
          ID 'TASK_FLD2' FIELD '__________'
          ID 'TASK_FLD3' FIELD '__________'
          ID 'TASK_FLD4' FIELD '__________'
          ID 'TASK_FLD5' FIELD '__________'
          ID 'TASK_FLD6' FIELD '__________'
          ID 'TASK_FLD7' FIELD '__________'
          ID 'TASK_FLD8' FIELD '__________'.

Resolved issue.

Regarding Authority check for V_VTTK_SHT in one exit

Hi Experts
1.For VT01N transaction , there is one customer exit : ZXV56U18.
2.In this we will get the shipment type value.
3.I have to check the authority check for this shipment type (SHTYP) field.
4.I have written the following statement :
   authority-check object 'V_VTTK_SHT'
                  ID 'SHTYP' field    I_XVTTK_TAB-SHTYP
                  ID 'ACTVT' field '07'.
5. For my user id , i have check the user profile in SU01.
6.For me this authorization object , field ACTVT does not contain 07 value.
7.In debugging , the SY-SUBRC giving the value 0.even the user profile does not contain the value '07' for ACTVT field
Can u tell y it is happening like that ?
Regards
Ramakrishna L.

Hi Experts
1.For VT01N transaction , there is one customer exit : ZXV56U18.
2.In this we will get the shipment type value.
3.I have to check the authority check for this shipment type (SHTYP) field.
4.I have written the following statement :
   authority-check object 'V_VTTK_SHT'
                  ID 'SHTYP' field    I_XVTTK_TAB-SHTYP
                  ID 'ACTVT' field '07'.
5. For my user id , i have check the user profile in SU01.
6.For me this authorization object , field ACTVT does not contain 07 value.
7.In debugging , the SY-SUBRC giving the value 0.even the user profile does not contain the value '07' for ACTVT field
Can u tell y it is happening like that ?
Regards
Ramakrishna L.

ITunes does not allow me to download at Store "You do not have authority to write in iTunes Media files. Adapt your authorisation in explorer and check for available downloads in Store

As administrator of my pc icannot download musc/video from Store: the message (translated from Dutch) "You do not have authority to write in iTunes Media files. Adjust your authorisation in explorer and check for available downloads in Store

Hey! I had the same problem you did just today when I was trying to get my second iPhone to sync. What you need to do with music or anything extra that you doing you have to creat a second playlist or picture or anything that you would like to use, so that you can add to the second device that you are going to be using. I am not sure if that will help but it helped me out a lot!! Good luck!

Check for authorized employee

Similar Messages

Maybe you are looking for