How do I secure PA0001 table by Personal Area

Hi All,
How do I secure PA0001 table by Personal Area?
Usually Personal Area is defined by the data element PERSA, but in case of PA0001 table it is using WERKS. usually WERKS is a data element for Plant which is used in many other auth objects.
Can anyone please tell me if there is any way to secure PA0001 table by Personal Area?

If I understand correctly, you are having a custom report created which picks up data from PA0001 table and you want the report to pick up only certain entries from the table which is pertaining to a personnel area that the user is authorized to.
In that case, you can have a auth check included in the custom report on P_ORGIN (or P_ORGINCON) along with S_TABU_DIS, so that PERSA that your user is authorized is picked up and only those are passed as input to PA0001 to fetch relevant data. Or if user has a option to specify PERSA in selection screen of your report, auth check is made first on P_ORGIN to check if user has authorization to that PERSA or not and then fetch data from the table accordingly.
Thanks
Sandipan

Similar Messages

How to override security for table access when using SAP Query?

We have a number of infosets which use table join between PA0001 and CATSDB table. To execute a query based on such a query you would need access to table auth group PA through S_TABU_DIS. This was earlier not a problem as SAP query was earlier used by support staff and not end users. We do not want to give S_TABU_DIS with to end users as this amounts to givin them access to all PA tables.
The generated code for the query checks for the condition
"%rtmode-no_authchk = space"
before going for the authorization check.
Thus, ideally the authorization check for an InfoSet can be skipped if we can pass X for this variable from the InfoSet definition. Is there a way to do this?
Would appreciste any inputs to help suppress the authorization check at this point. Thanks.....

>
Julius Bussche wrote:
> Perhaps you could replace it with a class of your own (transaction SE24)?
>
> I have not tried to do this; it was just a thought.
>
> Kind regards,
> Julius
unfortunately this does not work. SAP saw fit to 'hard-code' the implementation of the interface in RSAQEXCE:
(only parts of that abap displayed here).
170 data: iref type ref to if_query_tab_access_authority.
1107 *       FORM AUTHORITY_BEGIN
1112 form authority_begin using p_auth_classname type AQS_CLSNA.
1119   perform authority_init using p_auth_classname.
1120   call method iref->access_authority_begin.
well for my part (searching a solution for a query on LTAK, wanting L_LGNUM as an object) i'm out of ideas. i shall have to modify SAP-standard and disable the class and do my own coding in the info-set. no other possibility - i cannot allow S_TABU_DIS for group LA and even if i did, what help would it be - i would have to allow that to all companies in that client having WM - and that would be literally all - i need LGNUM here!

How to get list of tables/users that are under audit

Hello,
For testing perpose I have set audit on many tables and users.
Is there any view or table from which I get list of objects that are kept under audit?
Noaudit All command for disabling all of them does not work properly. I have to exactly revert audit to stop.
Means if I write audit insert on table1;
Now for disabling this, if I write noaudit all then it dont works but If I write noaudit insert on table1 then it works.
So I need a list on which objects I start audit.
Or is there any other way to stop them?
Regards,
Bhavin M Mistry...

Try
DBA_STMT_AUDIT_OPTS
DBA_PRIV_AUDIT_OPTS
DBA_OBJ_AUDIT_OPTS
SYS@etest> audit role;
Audit succeeded.
SYS@etest> SELECT * FROM DBA_STMT_AUDIT_OPTS;
USER_NAME                      PROXY_NAME
AUDIT_OPTION                             SUCCESS    FAILURE
ROLE                                     BY ACCESS BY ACCESS

How to reference already created tables?

I just started with Oracle and I created 5 tables. On two of the tables i created the references but I never clicked ADD, so they were not added. How can I link the tables after they are already created?

You want to add primary and foreign key. There is alot of articles with how to do this.
The basic solution is:
ALTER TABLE table_name
add CONSTRAINT constraint_name
FOREIGN KEY (column1, column2, ... column_n)
REFERENCES parent_table (column1, column2, ... column_n);

How can I secure my computer from the new virus?

I apologize if this question has been asked already, but I was unable to find any useful information regarding how I can secure my computer. Also, are Snow Leopard Macs still at risk?

The ‘Flashback Trojan’:
A version of an existing Trojan Horse posing as a legitimate Flash Player installer (named “Flashback.A” by a security firm) is designed to disable updates to the default Mac OS X anti-malware protection system, potentially leaving the system open to the manual installation of other malware without any system warnings. The latest Macs do not have Plash Player included. In order to prevent a potential infection with “Flashback” Trojans, Mac users should always obtain their copy of Adobe Flash Player directly from Adobe’s official website and to disable the "Open 'safe' files after downloading" option in Apple's Safari browser to avoid automatically running files downloaded from the Internet. Also, do not turn on Java in Safari Preferences/Security. Few websites use Java. Javascript is something entirely different and should be left active.
http://www.appleinsider.com/articles/11/10/19/fake_adobe_flash_malware_seeks_to_ disable_mac_os_x_anti_malware_protection.html
Flashback Trojan - Detection, and how to remove (with caution):
http://www.f-secure.com/v-descs/trojan-downloader_osx_flashback_i.shtml
You can also use this to check whether you have been infected (for Intel Macs only) and remove it if required:
http://www.macupdate.com/app/mac/42571/anti-flashback-trojan

How find the Special Character Table?

Hi friends.
i need table for special characters. how find the special character table.
example : &,@<#<$ -- all are special characters.
any body please reply immdly.
regards
pauldharma

Hi Raj,
Check this forum thread:
Print Currency as symbols in SAPSCRIPT/Smartforms
Hope this helps.
Regards,
Vivek Myadam

HR-Authorization Objects (Personal Area)

Dear All,
        Can anyone please tell me how to findout the Authorization objects for Personal Areas.
        My Requirement is for Some Z- Screens and Reports, I have to provide Authorization objects on
        Personal Areas.
        If found then how to proceed to provide Authorizations..
        Fruitfull aswer is definitely rewarded.
Thanks in Advance,
Regards,
Satya.

Hi
Generally Authorization objects are created by BASIS consultants.
To create/find Authorization object for personnal Area,
Goto SU03- access Class HR -> Object P-ORIGIN-> then check/create the values for the field PERSA (Personnal Area).
For checking authorization Reports, we use command 'AUTHORITY-CHECK OBJECT'.
Below is the link for documentation on the above command [http://help.sap.com/erp2005_ehp_03/helpdata/EN/fc/eb3ba5358411d1829f0000e829fbfe/frameset.htm]
Regards,
Shrinivas

How do we secure a custom table?

Hi
How do we secure a custom table, custom program and a custom transaction code? What are the alternative ?
thank You

Hello Subash
Usually I define customer tables as "application data" table in the attributes. However. If you have very sensitive data in your customer table then you could set it as "customizing" table. In this case the same security measures that are valid for standard tables (e.g. no customizing allowed in production systems) will be valid for your table, too.
Regards
Uwe

Tables with personal data

Hello Experts,
I need to know which tables save personal data(last name, social security number, position, etc) for every user in the system.
I have been searching and I know that ADRC,ADRP tables saved this kind of information, but I need an official note to corfirm all the tables.
Would you please help me out with this.
Thank you,

hi Javier,
just test these functions in Tranaction SE37 and read through the documentation. It is very well explained how to use these funtions and afterwards you can get inside the functions, read through the coding and perhaps make an trace while testing it.
That's it. If you get in trouble, look for an experienced ABAP-developer near you and he/she will give you a hand for sure.
~Florian

How to update a fact table when a dimension table is reloaded

We have implemented BI Apps 796. Insertion into W_EMPLOYEE_D table which stores all the employee information had stopped one year back as some company security policy restricted the informatica worklfows to pick up the data. (PER_ALL_PEOPLE_F was a HRMS table and it contained sensitive information line SSN and salary, was inaccessible to the user which informatica uses and the SDE mapping used to return 0 rows).
Now we have the approval to see those rows and the dimension table is loaded with some 100 new employees who joined in last one year.
The ROW_WID of W_EMPLOYEE_D is referenced in lot of fact tables and for all those missing employees the WID in the fact table is 0.
Now that we have all employees, how to make the FACT table point to the correct WID and not store 0. Has anyone faced this problem before?? Writing an update statement will be a tedious task as there are so many fact tables that join to w_employee_d. Also our company uses Sales, Procurement, Finance modules of OB Apps (which constitutes atleast 20 fact tables)
Any guidance is appreciated. Thanks in advance

Hello Kostis,
thank you for your answer. I don't fully understand you. Can you show me short example, please? I create alias table for time dimension on Physical Layer - original table is TimeDayDim and I create aliases TimeDayDim1, TimeDayDim2, TimeDayDim3, TimeDayDim4. Then I create foreign key Fact.Time1 -> TimeDayDim1, Fact.Time2 -> TimeDayDim2, Fact.Time3 -> TimeDayDim3, Fact.Time4 -> TimeDayDim4. And what now? Must I create these table api Bussines Model and create new time dimensions at bussiness model????
I need in Answers ONE Time dimension. I think I must split my fact table to four tables ... (time1, place1 ...) (time2, place2 ...) (time3 place3...) (time4 place4...) then link those tables to Time dimension (but I dont know where I can split those tables - on Physical Layer or on Bussines Layer).
I suppose that I will have in Answers one time dimension and four facts tables and I will be able to query them. (for example: Time.Days, Fact1.Place1, Fact3.Speed, Fact4.Count Criteria: Time.Year = 2008)
Best Regards Vlada

How to send a mail to a person from after completeing bdc .

Hi Xperts,
Please send me a options how to send a mail to a person after completing a bdc or from any report program.
mailed can be a sapuser or other service provider(ex:yahoo,gmail.any thing)
Please Any one i want it now .
Thank You.

FUNCTION RS_SEND_MAIL_FOR_SPOO* Email ITAB structure
DATA: BEGIN OF EMAIL_ITAB OCCURS 10.
        INCLUDE STRUCTURE SOLI.
DATA: END OF EMAIL_ITAB.
DATA: T_EMAIL LIKE SOOS1-RECEXTNAM. "EMail distribution list
CONSTANTS: C_EMAIL_DISTRIBUTION LIKE SOOS1-RECEXTNAM VALUE
           [email protected],[email protected].
Initialization
REFRESH EMAIL_ITAB.
Populate data
EMAIL_ITAB-LINE = Email body text 1.
APPEND EMAIL_ITAB.
EMAIL_ITAB-LINE = Email body text 2.
APPEND EMAIL_ITAB.
T_EMAIL = C_EMAIL_DISTRIBUTION.
--- EMAIL FUNCTION ---------------------------------------------------
REQUIRMENTS:
1) The user running the program needs a valid email address in their
   address portion of tx SU01 under external comms -> SMTP -> internet
   address.
2) A job called SAP_EMAIL is running with the following parameters:
   Program: RSCONN01 Variant: INT   User: XXX
   This program moves mail from the outbox to the mail server using
   RFC destination: SAP_INTERNET_GATEWAY_SERVER
INTERFACE:
1) APPLICATION: Anything
2) EMAILTITLE: EMail subject
3) RECEXTNAM:   EMail distribution lists separated by commas
4) TEXTTAB:     Internal table for lines of the email message
EXCEPTIONS:
Send OK = 0 otherwise there was a problem with the send.
    CALL FUNCTION 'Z_SEND_EMAIL_ITAB'
         EXPORTING
              APPLICATION = 'EMAIL'
              EMAILTITLE = 'Email Subject'
              RECEXTNAM   = T_EMAIL
         TABLES
              TEXTTAB     = EMAIL_ITAB
         EXCEPTIONS
              OTHERS      = 1.
Function Z_SEND_EMAIL_ITAB
""Local interface:
*"       IMPORTING
*"             VALUE(APPLICATION) LIKE SOOD1-OBJNAM
*"             VALUE(EMAILTITLE) LIKE SOOD1-OBJDES
*"             VALUE(RECEXTNAM) LIKE SOOS1-RECEXTNAM
*"       TABLES
*"              TEXTTAB STRUCTURE SOLI
*- local data declaration
DATA: OHD    LIKE SOOD1,
        OID    LIKE SOODK,
        TO_ALL LIKE SONV-FLAG,
        OKEY   LIKE SWOTOBJID-OBJKEY.
DATA: BEGIN OF RECEIVERS OCCURS 0.
          INCLUDE STRUCTURE SOOS1.
DATA: END OF RECEIVERS.
*- fill odh
CLEAR OHD.
OHD-OBJLA    = SY-LANGU.
OHD-OBJNAM   = APPLICATION.
OHD-OBJDES   = EMAILTITLE.
OHD-OBJPRI   = 3.
OHD-OBJSNS   = 'F'.
OHD-OWNNAM   = SY-UNAME.
*- send Email
CONDENSE RECEXTNAM NO-GAPS.
CHECK RECEXTNAM <> SPACE AND RECEXTNAM CS '@'.
*- for every individual recipient send an Email
(see OSS message 0120050409/0000362105/1999)
WHILE RECEXTNAM CS ','.
    PERFORM INIT_REC TABLES RECEIVERS.
    READ TABLE RECEIVERS INDEX 1.
    RECEIVERS-RECEXTNAM = RECEXTNAM+0(SY-FDPOS).
    ADD 1 TO SY-FDPOS.
    SHIFT RECEXTNAM LEFT BY SY-FDPOS PLACES.
    MODIFY RECEIVERS INDEX 1.
    PERFORM SO_OBJECT_SEND_REC
     TABLES TEXTTAB RECEIVERS
      USING OHD.
ENDWHILE.
*- check last recipient in recipient list
IF RECEXTNAM <> SPACE.
    PERFORM INIT_REC TABLES RECEIVERS.
    READ TABLE RECEIVERS INDEX 1.
    RECEIVERS-RECEXTNAM = RECEXTNAM.
    MODIFY RECEIVERS INDEX 1.
    PERFORM SO_OBJECT_SEND_REC
     TABLES TEXTTAB RECEIVERS
      USING OHD.
ENDIF.
ENDFUNCTION.
      FORM SO_OBJECT_SEND_REC                                       *
FORM SO_OBJECT_SEND_REC
TABLES OBJCONT      STRUCTURE SOLI
        RECEIVERS    STRUCTURE SOOS1
USING   OBJECT_HD    STRUCTURE SOOD1.
DATA:   OID     LIKE SOODK,
          TO_ALL LIKE SONV-FLAG,
          OKEY    LIKE SWOTOBJID-OBJKEY.
CALL FUNCTION 'SO_OBJECT_SEND'
       EXPORTING
            EXTERN_ADDRESS             = 'X'
            OBJECT_HD_CHANGE           = OBJECT_HD
            OBJECT_TYPE                = 'RAW'
            OUTBOX_FLAG                = 'X'
            SENDER                     = SY-UNAME
       IMPORTING
            OBJECT_ID_NEW              = OID
            SENT_TO_ALL                = TO_ALL
            OFFICE_OBJECT_KEY          = OKEY
       TABLES
            OBJCONT                    = OBJCONT
            RECEIVERS                  = RECEIVERS
       EXCEPTIONS
            ACTIVE_USER_NOT_EXIST      = 1
            COMMUNICATION_FAILURE      = 2
            COMPONENT_NOT_AVAILABLE    = 3
            FOLDER_NOT_EXIST           = 4
            FOLDER_NO_AUTHORIZATION    = 5
            FORWARDER_NOT_EXIST        = 6
            NOTE_NOT_EXIST             = 7
            OBJECT_NOT_EXIST           = 8
            OBJECT_NOT_SENT            = 9
            OBJECT_NO_AUTHORIZATION    = 10
            OBJECT_TYPE_NOT_EXIST      = 11
            OPERATION_NO_AUTHORIZATION = 12
            OWNER_NOT_EXIST            = 13
            PARAMETER_ERROR            = 14
            SUBSTITUTE_NOT_ACTIVE      = 15
            SUBSTITUTE_NOT_DEFINED     = 16
            SYSTEM_FAILURE             = 17
            TOO_MUCH_RECEIVERS         = 18
            USER_NOT_EXIST             = 19
            X_ERROR                    = 20
            OTHERS                     = 21.
IF SY-SUBRC <> 0.
    RAISE OTHERS.
ENDIF.
ENDFORM.
      FORM INIT_REC                                                 *
FORM INIT_REC TABLES RECEIVERS STRUCTURE SOOS1.
CLEAR RECEIVERS.
REFRESH RECEIVERS.
MOVE SY-DATUM TO RECEIVERS-RCDAT .
MOVE SY-UZEIT TO RECEIVERS-RCTIM.
MOVE '1'       TO RECEIVERS-SNDPRI.
MOVE 'X'       TO RECEIVERS-SNDEX.
MOVE 'U-'      TO RECEIVERS-RECNAM.
MOVE 'U'       TO RECEIVERS-RECESC.
MOVE 'INT'     TO RECEIVERS-SNDART.
MOVE '5'       TO RECEIVERS-SORTCLASS.
APPEND RECEIVERS.
ENDFORM.
2.

Doubt IN Pa0001 Table

hi all
I have created one HR report. In that report contain empno. field, i want to get cost center (KOSTL) from PA0001 table based on empno. But in Pa0001 has more than one record for particular employee. I want to get latest record. how can i get cost center?

please     use this code and see in the debug mode
the     table will have only the latest record of the employee .
****1 method ****Selecting the latest infotype record
rp_provide_from_last p0001 space pn-begda pn-endda.
(or)
*****2 mothod ***Loop around data from more than one infotype
PROVIDE BEGDA ENDDA STAT2 MASSN MASSG FROM P0000
        PERNR PERSK BTRTL SACHZ FROM P0001
BETWEEN PN-BEGDA AND PN-ENDDA
WHERE P0000-BEGDA < sy-datum AND
        P0000-ENDDA > sy-datum AND
        P0001-BEGDA < sy-datum AND
        P0001-ENDDA > sy-datum.
(or)
****3method *Loop around infotype data (similar to select/endselect).
PROVIDE * from p0001 between pn-begda and pn-endda.
ENDPROVIDE.
reward points if it is usefull
Girish

How do i get firefox to remember personal info and fill it in automatically

How can I get Firefox to memorize personal info (name, address, etc.) and automatically fill in forms when ordering products, registering for an account, etc.?

Remove site(s) from the Exceptions: Tools > Options > Security: Passwords: Exceptions
See also:
* http://kb.mozillazine.org/Password_Manager

How to assign changed organizational unit to person

Hi Experts,
we moved some employees from one organizational unit to newly created one in tcode PPOM_OLD.
In PPOM_OLD i created new unit ,assign position then assigned employee
But when i see in PA30 the organizational unit remains same.Even when i observed in PA0001 table i can see two entries for one employee number the old entry is with organizational unit where as new one doesnt have organizational unit at all
Please guide me how can i do changes.
Thanks&Regards,
narasimha

Go to transaction code- PA40
Enter the date -
Select the action
Execute the Action.
Select the Reason for Action
Change the position number
Change the personnel area if required.
Press Enter and save the record.

How to access the database tables from application

Hii all,
The information in webcenter content, such as meta data fields, users, security groups etc are stored in
database tables like- Revisions, SecurityGroups, Users, DocType etc..
Can we access this tables from an adf application or any webcenter application..
If yes, then what can be the approach for that..??
Another things, how can we create custom tables just like the predefined tables...??
Any information regarding this.??
Thanks

Can we access this tables from an adf application or any webcenter application.Yes, you can - like to any other existing database. But I would strongly discourage you from any, but read-only access, or you can easily end up with inconsistent data.
If yes, then what can be the approach for that..??Just create a database connection and define in your model what tables you want to access.
Another things, how can we create custom tables just like the predefined tables...
Actually, WebCenter Content provides functionality of creation of custom tables (see http://docs.oracle.com/cd/E23943_01/doc.1111/e10978/c04_metadata.htm#autoId2 ) and these are probably the only good candidates for read-write access. See further in the manual what use cases are supported. Of course, you could do this even externally, but rather than Data Definition Language, I'd use services (if there are some).

How do I secure PA0001 table by Personal Area

Similar Messages

Maybe you are looking for