Control to Stop Users Inputting their own Time Data?

Hi all. I'm carrying out a security review of users on a SAP HR implementation. I was wondering if there is a control in place on SAP that would stop a user with access to make changes to input time from inputting their own time on the system using PTMW. Thanks

Hi John,
You have to use the authorization object P_PERNR with the value E = Authorization for all personnel numbers excluding own personnel number for field PSIGN while creating the authorization profiles and assigning to HR roles.
Pls refer the below link:
http://help.sap.com/erp2005_ehp_02/helpdata/en/94/b8b83b5b831f3be10000000a114084/content.htm
Regards
Raviiiiiiiiiii
Edited by: ravishanker m on Jul 1, 2011 10:35 AM

Similar Messages

Control to Stop Users Changing their Own Employee Master Data

Hi all. I'm carrying out a security review of users on a SAP HR implementation as part of this we are looking at users that can change bank details, basic pay etc. I was wondering if there is a control in place on SAP that would stop a user with access to make changes from changing their own Basic Pay on the system. Thanks

Hi Jonh,
Sure there is a way to stop it; you have to use infotype 0105 + security object P_PERN, please follow this link to get more details: HR Authorizations Backend v/s ESS
Hope that helps,
Best regards,
Federico.

Users marking their own responses as correct?

What is the deal with Users marking their own responses as correct?
I go under the assumption that if something is marked as Answered, it means that I've SEEN THE ANSWER.
If someone other than ME marks MY question as ANSWERED, it drops off my Radar.
Very, very dysfunctional. I track UNANSWERED question!
PLEASE STOP IT!

Hi Matthew
First, capitalizing is really not needed. I do understand your frustration, but honestly...
Now, I will come clean and admit that on occasion, in my role as a moderator and editor of SCN, I have marked posts as answered. This will usually happen if I see that the post is a number of days old without a response to what I believe (OK, know) was the correct answer. I do this for a few reasons:
1) Many OPs do not mark their posts as answered. Would be nice if they did...
2) Many OPs make the answer as "Helpful", even though it is DE answer. I will then change this to answered.
3) Posts marked as answered are much more likely to be looked at than abandoned post with no further feedback as to the posted answers being correct or not.
4) Marked posts make it obvious that these forums are active and do provide answers consistently.
I could go on, but I hope I get my view across(?).
Oh. BTW., I may mark my own replies as "Answered" . It is not something I do to gain points. For one, I do not get points for marking my replies as "Answered" (it the way SCN works). For two, I really do not care about the number of points I get. I do not get measured on it and there is just nothing in it for me. Other than keeping the forums alive, vibrant and well.
- Ludek
Senior Support Engineer AGS Product Support, Global Support Center Canada
Follow me on Twitter

Fleet phones: Why must each user have their own App Store account?

I've purchased roughly 25 iPhones for my employees and am trying to lumber through the tedious process of managing these as fleet assets. There are a handful of mission-critical apps I'd like to deploy. I've signed up with an MDM platform (Bushel). I've enrolled in both of Apple's fleet programs (VPP and DEP). And, still, I'm running into precisely the obstacle I'm needing to get around: the requirement that every user has their own individual App Store account, with a Credit Card number on file, etc.
Why must this be? These are company-owned phones. Most of my employees are unionized and, quite frankly, the union is none too happy about the nature of the apps I'm deploying (which have to do with GPS tracking and time/attendance). I simply cannot require my union employees to sign up for an account in their names and require a credit card number.
Even lowly Blackberry figured this out a long time ago. If Apple is going after more fleet business, they need to become more fleet friendly.

I did some searches before my post, but actually found some things AFTER I made my post that sounded encouraging. If I understand correctly, we should be able to continue sharing the AppleID we use to buy apps and music on all of our devices. We can configure our personal devices and computers to use separate personal iCloud accounts, but somehow share the music and apps with each other. I guess I'm still not clear on how it'll work. :-)

We have multiple devices in our family. On each iPad/iPhone each user has their own apple id for iMessage, Facetime and icloud, but we all sign in to the same apple id for itunes. When one of my kids comments on my shared photostream, it shows my name??

We have multiple devices in our family. On each iPad/iPhone each user has their own apple id for iMessage, Facetime and icloud, but we all sign in to the same apple id for itunes. When one of my kids comments on my shared photostream, it shows my name and not theirs as the commenter. How do I fix that?

CREATE A NEW USER
Go to System Preferences --> Create a New User in Users & Groups
Decide on whether to setup as Admin or Standard User.
Switch to the New User by logging out under the Apple in the Menu Bar or use Fast User Switching
Fast User Switching allows other users to leave current applications and windows open. Depending on RAM, you might need to log out rather than use FUS.

When is iphones going to make users customize their own text tones?

When is iphones going to make users customize their own text tones?

No one here knows if Apple will change this. If you want to suggest this feature to Apple for updates in the future, please visit the link below.
http://www.apple.com/feedback

List all users and their own roles.

Hi everybody!
I have to make a list of all sap users and their own separated roles by user. There are any transaction to do it? The SUIM transaction gives me a sap user and their own roles, but if I try with a lot users It gives me all the roles that are using those users but don't give me the roles for each one.
Thanks a lot.
Best regards.

Hi Reynaldo,
You can go to SE16 -> table name "AGR_USERS" and see the records for all users. Arrange them in ascending order by name and you will get the report what you have mention above.
Download it and put it in EXCEL.
Best Wishes.
Kumar

Users changing their own passwords

we have set up an Open Directory and are going through the steps to deploy. One issue we have yet to find an elegant solution to is user's passwords and changing them on a regular basis. Many of the contracts we deal with stipulate user passwords are to be changed every 45 days.
Now - there is no way we want our users monkeying around in Workgroup Manger changing their own passwords - and the last thing we on the IT team want to do is perform data entry tasks every couple of months to change everyone's password. Plus - for security reasons - this is a terrible idea.
so - is there an easy way to have a user update their password without going through Workgroup Manager?
thanks

And you can set the password lifetime and reset and character-content policies in Server Admin > Open Directory > Policies > Passwords, if you've not already found that set of knobs.
I'd also suggest looking to two-factor or certificate-based approaches, if you're having requirements around password resets.

Form control to stop user from changing setting

I have a list when the form is opened only those users in a Group, 2nd list… can change the some of the columns in the list. Making half the list read-only to the 2nd group I have the "edit" form setup as two pages with buttons
to flip back and forth.
The 2nd page is the one I am tiring to control. I don't care if they can see it, but I don't want change it. I have tried https://stevessharepointnuggets.blogspot.com/2012/05/infopath-2010-restricting-control.html but this is based off of two user groups
those who can see the button and those that cannot. If the user is in both lists, this does not work. All users is in one group (any user in SharePoint)
I thought about adding the group of users to the form by workflow when created but from there I can find a way to capture the user that opened the form to compare to the list column.

I think maybe the cleanest way is with server-sided scripting
(php, asp,
...). The form page would create a session/cookie based on
the user
input, then the 3 other pages would check for that
session/cookie and if
it exists, let them in. If it does not exist, redirect to
another
"error" page. This requires a little more heavy lifting than
what DW
will do for you out of the box though.
Alec Fehl, MCSE, A+, ACE, ACI
Adobe Community Expert
AUTHOR:
Microsoft Office 2007 PowerPoint: Comprehensive Course
(Labyrinth
Publications)
Welcome to Web Design and HTML (Labyrinth Publications)
CO-AUTHOR:
Microsoft Office 2007: Essentials (Labyrinth Publications)
Computer Concepts and Vista (Labyrinth Publications)
Mike Meyers' A+ Guide to Managing and Troubleshooting PCs
(McGraw-Hill)
Internet Systems and Applications (EMC Paradigm)

Can external users change their language, time zone, and locale settings?

Hi,
We’re migrating our hosts from WebEx cloud to our on-prem solution right now (CWMS 1.5.1.323.A).
We’ve learned that CWMS 1.5 does not provide an online address book where hosts could customize language, time zone, and locale settings for their external attendees.
Do external users have any chance at all to change their language, time zone and locale settings individually?
Thank you,
Helge

Hi Dejan,
"external users" are those participants, who do not have an LDAP account in our deployment, since they are not intendet to act as hosts: our stakeholders, partners, customers, clients.
It looks, as if these people would stick to the systems' default language / time zone / locale.
We are wondering if there might be a CWMS-component like this:
https://artcom.webex.com/cmp0307l/webcomponents/widget/preference.do?serviceType=MC&siteurl=artcom&target=Page&backUrl=%2Fmw0307l%2Fmywebex%2Fdefault.do%3Fsiteurl%3Dartcom%26service%3D1
to allow those "extenal" participants to make their adjustments.
Thank you,
Helge

How can my users add their own texts in my website

Hello there. I really looking for an answer to this. I want my users can add their own texts on an image in my website. I find this feature in some design sites. Please respond, i really want to handle this. Thanks.

Hi Peren,
I am afraid that this is not possible in Muse at this stage, I will recommend that you post this on our ideas section over here, https://forums.adobe.com/community/muse/ideas, and let our devs team know of this requirement.
- Abhishek Maurya

OD users resetting their own passwords

Looking for a mechanism whereby OD users can reset their own passwords--specifically users without workstation access.
I am deploying a lot of blog/wiki services to clients. Am finding that I have to generate random passwords for them--would rather push them a temp pw & let them reset on first wiki login, as I can with workstation users.
Any help appreciated.

And you can set the password lifetime and reset and character-content policies in Server Admin > Open Directory > Policies > Passwords, if you've not already found that set of knobs.
I'd also suggest looking to two-factor or certificate-based approaches, if you're having requirements around password resets.

User cancelling their own session

Hi
Is there functionality available, or something I can activate or develop, that will allow a user to cancel their session entirely from the portal.
The problem we're facing is that if a user does something on a report, like try to view every article for every site (300,000 articles and 170 sites), that puts quite a load on the server. If the user realises their mistake, they can exit IE, but that doesn't seem to cancel the long running request.
I have monitored transaction SM50 in BW, and it doesn't seem like the session is hanging there, so I can't just give them access to that transaction and allow them to kill their session from that screen.
I am thinking that perhaps the session is active on the Java engine, and wondering if there is some way for a user to cancel their session on the Java side of things.
Any ideas?
Cheers,
Andrew

Andrew,
Are ou using BW Web or Portal ..? If you are using Portal - you can enable Distributed Session Management (DSM) to achieve the same.

Client updating/changing their own form data

We've added some fields to our form for a 4th day of volunteering after many people have already signed up. We want them to be able to sign up for the added day.
Is there a way to for individuals to update their own data on their form or do we have to do it from the backside?
This is our form:
https://adobeformscentral.com/?f=OH3E-aGP4i0WAwYAhSt3BA
We added the option for Monday after 50 or so people had already signed up.
There are lots of required fields and show/hide fields within the form.
We don't want duplicates which is what would happen if I just asked people to repeat fillingout the whole form.
Any options???
Terri

Users cannot go back to the form and update their data. I would just create a new, shorter form that has only their name/email address and info about 4th day. You can then merge the data sets from the 2 forms using the email address.
Hope that makes sense and is helpful...
Randy

Can users have their own subscription in SSRS?

Is there a way user can subscribe a report of his own in SSRS 2008R2?
We have about 20 reports and 400 users and everyone have their report parameter selection criteria. Is there a way they can default their parameter selection and subscribe?
Another requirement is
Is there a way to save favorite selections within a report to then choose them later.
Favorite #1
Favorite #2
Thanks,
Jo

Hi Jyo1105,
Answer1: According to your description, there are 20 reports and 400 users, you want to set specific parameter values based on recipients. If that is the case, we can achieve your goal by using Data-driven Subscription.
Reporting Services provides data-driven subscriptions so that you can customize the distribution of a report based on dynamic subscriber data. Data-driven subscriptions use query results to determine the recipients of the subscription, delivery settings,
and report parameter values. At run time, the report server runs a query to get values used for subscription settings. We can use the Create Data-driven Subscription pages to define the query and assign query values to subscription settings. For detail information,
please refer to the following steps:
1. Open Report Manager, and locate the report for which you want to create a data-driven subscription.
2. Hover over the report, and click the drop-down arrow.
3. In the drop-down menu, click Manage. This opens the General properties page for the report.
4. Select the Subscriptions tab, and then click New Data-driven Subscription.
5. Select the delivery extension and data source for the subscription.
6. Specify a query that retrieves subscriber data like below:
CREATE TABLE Name (
Group varchar(20),
Country varchar(20),
Type varchar(20),
Email_to varchar(50)
INSERT INTO Name
('Group1', ’Country1’, ’Type1’, '[email protected]'),
('Group2', ’Country2’, ‘Type2’, '[email protected]'),
('Group3',’Country3’, ’Type3’, '[email protected]')
7. Specify delivery extension options like below:
8. Specify report parameters for the subscription like below:
9. Specify when the subscription is processed, then click Finish to save the configuration.
For more information about Data-driven Subscription, please refer to the following documents:
http://msbimentalist.wordpress.com/2013/08/26/how-to-create-data-driven-subscription-in-ssrs/
Answer2: As per my understanding, there may be several parameters in the report, when users preview the report, they need to select values for each parameter. So you want to save some selections as favorite.
In Reporting Services, we could not achieve the goal directly. As a workaround, we can use snapshot. For more details, please refer to the following steps:
1. Open Report Manager, and navigate to the report.
2. Hover over the report, and click the drop-down arrow.
3. In the drop-down menu, click Manage.
4. Click Parameter in the left pane, set default values for the parameters, then click Apply.
5. Click Report History in the left pane, click New Snapshot.
In this way, the parameter selections are saved, when we click the snapshot, the report server retrieves the stored report from the report server database, and shows the data, parameter selections and layout at the time when the snapshot was created.
If you have any more questions, please feel free to ask.
Best Regards,
Wendy Fu

Control to Stop Users Inputting their own Time Data?

Similar Messages

Maybe you are looking for