HR Authorization Issue (How can it be achieved)

Hi Gurus,
Our SAP HR PA data authorization is by Org Key using P_ORIGIN security object. As a result, HR Users who have the access for the Org Key can view records of employees belonging to that particular Org Key.
The problem comes when an employee is transferred from old Org Key to new Org Key. As a result, HR user can still view  those records in PA infotypes for the prior periods when IT0001 org key was the old one.
Requirements: Our HR Head wants to completely block these kind of employees whose org key has been changed to the new one. Since HR Users dont have the authorization for the new Org Key; they should not be able to view PA IT0001 records for period which still have the value for old org key.
Any way to implement this kind of check ? Or any way to control security access by Pernr (so that we could block some pernrs from being viewed by HR user).
Please provide your insight..
Note: We have not activated P_ORGXX in our system.

Hello Amit,
Try to use organizational key (VDSK1) to restrict access to HR personnel information. When we change the value in the VDSK1 field from users not able to view PA data only for those employees for which they have responsibility. Use P_ORGIN and organization key (VDSK1) to do this.
Cheers and Regards.
Jaime

Similar Messages

  • TS1424 Charged for an app I did not authorize. How can I resolve this issue?

    Charged for an app I did not authorize.  How can I resolve this issue?

    call apple at 1-800-694-7466 or report a problem from purchase history see
    http://support.apple.com/kb/ht2727
    Peace, Clyde

  • I need to intercept all local files that are being loaded in Firefox. How can that be achieved?

    I am using geckofx in c#. I need to intercept response of a local file load request so that I can modify some data/response before it reaches Javascript.
    In short, I need something like
    1. JS requests browser to read a file.
    2. Browser reads content of a file.
    3. MAKE SOME MODIFICATIONS TO DATA (Additional Step)
    4. Then pass this modified data to JS to perform required tasks.
    Is this possible? If yes, how can this be achieved.

    You may need to rebuild permissions on your user account. To do this,boot to your Recovery partition (holding down the Command and R keys while booting) and open Terminal from the Utilities menu. In Terminal, type:  ‘resetpassword’ (without the ’s), hit return, and select the admin user. You are not going to reset your password. Click on the icon for your Macs hard drive at the top. From the drop down below it select the user account which is having issues. At the bottom of the window, you'll see an area labeled Restore Home Directory Permissions and ACLs. Click the reset button there. The process takes a few minutes. When complete, restart.   
    Repair User Permissions

  • I purchased a season of a TV show from itunes and it won't go onto my ipad, i've purchased several seasons in the past and never had this issue, how can i fix this?

    I purchased a season of a TV show from itunes and it won't go onto my ipad, i've purchased several seasons in the past and never had this issue, how can i fix this?

    Drew how is that even possible? I use gift cards all the time, any time I've had insufficient funds iTunes will not allow the purchase, sights Insufficient funds and rejects the purchase. Any time I log into my account the money in that account appears in the upper left corner. If you're not seeing that then you have other issues. Anyway... Kneil is right you should be able to rip CDs you own to your iTunes library (regardless of your money matters with iTunes), then depending on how you set up the music you need to add it to your playlist and then sync it to your iPod. Did imported music ever work? How are you ripping or importing the music to iTunes? Are you using a compatible format?
    Something else to look at-- It's possible your cable is defective, have you tried a new or different cable? Some of what your describing is a bad cable issue. Good luck, Cheers.

  • I have a Windows 7 Professional, 64 bits on my computer and have recently installed iTunes 11.1.3.8. but i started having this msg :"The folder iTunes is on a locked disk or you do not have write permission for this folder" issues: how can i solve it?

    I have a Windows 7 Professional, 64 bits on my computer and have recently installed iTunes 11.1.3.8. but i started having this msg :"The folder iTunes is on a locked disk or you do not have write permission for this folder" issues: how can i solve it?

    Right-click on your main iTunes folder and click Properties, then go to the Security tab and click Advanced. If necessary grant your account and SYSTEM full control of this folder, subfolders and files, then tick the option to replace permissions on child objects which will repair permissions throughout the library. This is the XP dialog but Windows 7 shouldn't be too different.
    If it won't let you change the permissions use the Owner tab to take ownneship from an account with administror privileges.
    tt2

  • Need to pass out parameter in middle of a process. How can this be achieved

    Package test_pkg
    procedure main_prc(x_stat out varchar2)
    insert_prc(l_stat);
    x_stat:=l_stat;
    valid_prc
    end main_prc;
    procedure insert_prc(x_stat1 out varchar2)
         insert into staging table
         x_stat:='S';
    end insert_prc;
    procedure valid_prc
         validate staging table data
    end valid_prc;
    end test_pkg;
    Requirement: Need to pass out parameter in middle of a process. How can this be achieved?

    Use return at any time to get the out variable, but this will stop the process.

  • Forgot my authorization questions how cani change them

    i got a new computer and i dont remember my itunes authorization questions, how can i change them?

    Click here and search the article for '2 out of 3'. Follow the instructions.
    (74000)

  • HT1657 Rented movie, but had to reimage to fix system issue, how can i re download movie

    Rented movie, but had to reimage to fix system issue, how can i re download movie

    You will need to try contacting iTunes Support and see if they will grant you a re-download of it http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page, then Purchases, Billing & Redemption

  • IPhone 6 Plus - IOS 8 Wifi Issue - How can we rule out a hardware issue

    iPhone 6 IOS 8 Wifi Issue - How can we rule out hardware
    With all the post about Wifi issue, could it be hardware and not software.  Anyone know how to diagnosis the difference.

    Hi Lady Engineer,
    If you are having an issue with Wi-Fi on your iPhone, I would suggest that you troubleshoot using the steps in this article - 
    iOS: Troubleshooting Wi-Fi networks and connections
    Thanks for using Apple Support Communities.
    Best,
    Brett L 

  • I've used up all 5 authorizations. How can I authorize a new Mac?

    I no longer have access to the pc's I've used iTunes on. I just bought a Mac. How can I authorize my Mac??

    If you no longer have the computer(s) you want to deauhtorise,
    Login to iTunes,  go to "view your account info" on the itunes store,  deauhtorise all five,  and then re-authorize your current Computers one at a time.
    Authorise / Deaurhorise About
    http://support.apple.com/kb/HT1420

  • How can this be achieved in SQL???????

    Hi Guys,
    This is my query:
    SELECT  distinct iy.trial_no,
           iypa.amendment_no,
           iy.country_code,
           iy.country_desc,
           iypa.amend_reg_submission_date,
           iypa.amend_reg_approval_date,
           iypa.amend_reg_comments,
           iyea.ea_amendment_submission_date,
           IYEA.ea_amendment_approval_date,
           iyea.ea_amendment_expiry_date,
           iyea.ea_approval_comments,
        iyea.master_approval_flag      
    FROM   irt_trc_protocol_amendment iypa,
           irt_trc_ethical_approvl_amend iyea,
           irt_trial_country iy
    WHERE  iypa.trial_no = iyea.trial_no
    AND    iypa.amendment_no = iyea.amendment_no
    AND    iypa.country_code = iyea.country_code
    AND    iypa.trial_no=101416
    AND    iy.trial_no= iypa.trial_no
    AND    iypa.country_code = 'GBR'
    AND    iypa.country_code = iy.country_code 
    AND    iyea.amendment_no = 4
    AND    IYEA.master_approval_flag = 1 The above query will only ever return one row because only one record can have it's master_approval_flag set to 1. However multiple records can have a master_approval_flag set to 0.
    This is what I want my query to acheive:
    Select the one row where master_approval_flag = 1. If there is no record where master_approval_flag = 1, then still only display one row but ommit the details from the IYEA table and only include
    the data from the IYPA table - Such that the output will only ever return one row....
    How can I do this?
    Thanks!

    This should work:
    select t.*
    SELECT  distinct
           iy.trial_no,
           iypa.amendment_no,
           iy.country_code,
           iy.country_desc,
           iypa.amend_reg_submission_date,
           iypa.amend_reg_approval_date,
           iypa.amend_reg_comments,
           iyea.ea_amendment_submission_date,
           IYEA.ea_amendment_approval_date,
           iyea.ea_amendment_expiry_date,
           iyea.ea_approval_comments,
           iyea.master_approval_flag
          ,row_number() over (order by iyea.Master_Approval_Flag desc) rn
    FROM   irt_trc_protocol_amendment     iypa,
           irt_trc_ethical_approvl_amend  iyea,
           irt_trial_country              iy
    WHERE  iypa.trial_no                  = iyea.trial_no
    AND    iypa.amendment_no              = iyea.amendment_no
    AND    iypa.country_code              = iyea.country_code
    AND    iypa.trial_no                  = 101416
    AND    iy.trial_no                    = iypa.trial_no
    AND    iypa.country_code              = 'GBR'
    AND    iypa.country_code              = iy.country_code 
    AND    iyea.amendment_no              = 4
    ) t
    where rn = 1You could possibly remove the DISTINCT and specify
          ,row_number() over (order by iyea.Master_Approval_Flag desc, iy.Tria_No, iy.Amendment_No) rn
    -- instead of
    ,row_number() over (order by iyea.Master_Approval_Flag desc) rnSince you are guranteed to always return a single row there may be no reason to use DISTINCT, which would probably slow the query down somewhat.

  • I'm having network security issues, how can I find out who has been seeing my information on my laptop

    How can I find out who has been loging on or attached to my network and on to my computer remotly.

    Dartrath--
    Please give us much more pecific information as to why you think someone is doing this?
    What signs and symptoms are you experiencing?

  • Vertical line issue - How can we get Apple to address this?

    Hi guys,
    As can be seen in this forum (and a lot of other forums, as well), a lot of people are experiencing this problem on their 17" iMac G5 with iSight. Here are some pertinent details (which may be familiar to a lot of people but can be a primer for those who are just starting to experience the problem):
    1. For most of us, these lines started appearing between 13-15 months after they purchased them. The lucky ones either had these failures occur during the first 12 months, or had APP.
    2. The majority of these units can be traced to the Shanghai factory W8 (enter your S/N in this website to get the manufacturing information of your unit: http://www.chipmunk.nl/klantenservice/applemodel.html).
    3. A similar issue occurred (or is occurring) with 17" PBs. From what I have read on the Apple PB forums, it seems that this has been a long standing issue and Apple has SUPPOSEDLY attempted to censor some of the posts discussing this. Note that these units can also be traced back to the same Shanghai factory.
    4. The "iMac G5 Repair Extension Program for Video and Power Issues" which certain people have always been referring users to on posts discussing this type of problem obviously refers to a totally different issue (http://www.apple.com/support/imac/repairextensionprogram/) and is applicable only to first gen iMac G5s. I'm sure that everyone appreciates it but, at this point, it is quite clear that it is not the solution to our problem.
    5. Based on the number of posts discussing this very same problem in the Apple forums, it is pretty obvious that these are not isolated issues. There are too many similarities (time of failure, how the numbers of line increase over time, manufacturing source, etc.)
    6. Some people have suggested that unstable power sources may be the primary cause of the problem. However, based on the locations of the people with these problems who have posted in this forum, it seems unlikely. From what I can see, the problem happens whether you are from a highly industrialized country (where a stable power source can be expected) or a developing country (where power sources MAY be more unstable).
    7. Apple has typically responded (to anyone who has taken the time to write or have their iMacs inspected) that this is not a known manufacturing defect issue. As such, the cost to repair this problem, which can go up to USD 500, will have to be borne by the owner.
    8. Based on posts of some people who have had their units repaired, it is the LCD that has to be replaced. This is also supported by posts from people who have resorted to purchase a separate display as a workaround.
    Now, the question is, *how do we get Apple to address this issue*? Do we all start writing Steve Jobs about it? Do we go to the press? Should we put up a website and Digg it to death? A spoof video on YouTube? MySpace? Or will we just suffer in silence? Suggestions anyone?
    P.S. Suggestions that involve any sort of violence or industrial sabotage are not acceptable, please.
    Note that Ale_Tog has put up a Flickr page where we can post photos of our poor iMacs. Just send the photo to [email protected] with the subject "Dead pixels on iMac". No text, just the photo attachment. (+Ale_Tog, if you read this, I hope you don't mind me posting this here. Also, I suggest that we at least put the first 5 chars of the serial number, the factory information which can be retrieved on the link in #2 above, and which country the unit is based.+). I highly recommend that everyone send a photo to show that these are not isolated issues.
    To get an idea on how many people are experiencing this problem, here are a list of posts in these forums, as well as others, discussing this issue (feel free to add to this):
    http://i7.ebayimg.com/05/i/000/b2/75/2e8d_1.JPG
    http://i16.ebayimg.com/06/i/000/b2/75/2ee5_1.JPG
    http://i12.ebayimg.com/07/i/000/b2/75/2faf_1.JPG
    http://discussions.apple.com/thread.jspa?threadID=974094
    http://discussions.apple.com/thread.jspa?messageID=5146382&tstart=0
    http://www.macusersg.org/forums/index.php?topic=40998.0
    http://discussions.apple.com/thread.jspa?threadID=607522&tstart=180
    http://discussions.apple.com/thread.jspa?threadID=463075&tstart=270
    http://discussions.apple.com/thread.jspa?threadID=197560&tstart=360 (this is about dead pixels, but one person reported a whole line)
    http://discussions.apple.com/thread.jspa?threadID=292889&tstart=390
    http://discussions.apple.com/thread.jspa?threadID=293895&tstart=390
    http://discussions.apple.com/thread.jspa?threadID=279138&tstart=420
    http://discussions.apple.com/thread.jspa?threadID=197630&tstart=465
    http://discussions.apple.com/thread.jspa?threadID=197745&tstart=510
    http://discussions.apple.com/thread.jspa?threadID=197741&tstart=510
    http://discussions.apple.com/thread.jspa?threadID=197641&tstart=585
    http://discussions.apple.com/thread.jspa?messageID=4227335&#4227335
    http://discussions.apple.com/thread.jspa?messageID=976574&#976574
    http://discussions.apple.com/messageview.jspa?messageID=4369582&stqc=true
    http://discussions.apple.com/thread.jspa?threadID=778470&tstart=0
    Please start sending your suggestions. The more the many-ier!

    Yep. I feel Apple's 1 year manufacturer warranty for the iMac is not adequate, especially for an all-in-one unit with a relatively high price.
    My iMac G5 started displaying a vertical cyan line about 4 weeks ago, only about 19-20 months after I bought it for Christmas in 2005.
    I called up Apple to enquire what could be done and was told by their customer service that a rather long period had elasped since the warranty expired in 2006. So I was told to take the iMac to an authorised repair centre and Apple will not contribute to the cost of the repair.
    I expect respectable service life from my computer and anything less than 5 years is totally unacceptable. Thus I seriously question the value proposition for the iMac in this respect. Does it mean that I have to replace my iMac every 2 years? The computer still feel reasonably zippy, I still have plenty of space left on my hard drive, but the screen is failing ...
    Today another line (green) appeared on the screen ...
    It is my understanding that a number of LCD monitor manufacturers are now providing 3 year warranties for their products. Now why should Apple only provide a 1 year warranty? Especially when the replacement option will cost more than buying an entire new LCD monitor with even better specifications?
    Based on the number of responeses I have seen here, this is not a rare occurance and I seriously question their quality control in their manufacturing process. I think Apple should be responsible for these repairs, and also provide a 3-year warranty for their LCD screens.
    My iMac's serial number is W8548Zxxxxx.
    Sincerely yours, an unhappy Apple customer.

  • I have to send messages through UDP multicast and unicast from same port. In Labview I tried that it throws error. I heard it is possible by means of Datagram (UDP unicast and multicast) Port Sharing. How can it be achieved in Labview?

    I have to send UDP multicast and Unicast messages to a remote port from a single source/local port. I tried by opening UDP unicast and multicast in the same port and got the expected error. I tried by opening a unicast connection and sending unicast messages.After that when multicast messages has to send I closed unicast and opened multicast in the same port.This is not throwing any error. But my requirenment is to comminicate with another application in C ++ which recieves this data, throwing an error of lost connectivity and both the applications are not abled to communicate properly. 
    In the other application with C++ this is implemented using port sharing. So how port sharing can be implemented in labview so that I can send both multicast and unicast messages from the same port?
    Thanks in advance

    UDP is a sessionless protocol, meaning that anyone listening on the specified port CAN receive the data. CAN because as you noted there is no guarantee in the protocol that it will be received. And if you send the data not to a specific address but a multicast address not only one computer can receive it but in fact every computer on the same subnet listening to that multicast address and depending on the TTL of the packet also computers in neighbouring subnets, although that last one is not a very reliable operation since routers can be configured to drop multicast packages anyhow despite of a different TTL saying otherwise.
    Accordingly there is no real way to make sure that a receiving UDP port is not already in use, since you don't build up a connection. UDP is more or less analogous to shouting your messages through a megaphone, and anyone listening on the right frequency (port) can hear it. You do bind the sender socket to a specific port number but that makes little difference.
    Rolf Kalbermatter
    CIT Engineering Netherlands
    a division of Test & Measurement Solutions

  • Robohelp 10 - Inserting a Last modified date in a topic - how can it be achieved?

    Hi there,
    this is my first post, so apologies if I am in the wrong place...
    I would like to insert a "last modified" date in my topics, but can't figure out how to do this! The Date field inserts today's date whenever the topic is opened, and so doesn't reflect the timeframes of changes accurately.
    I'd appreciate any help on this.
    Thank you
    Caroline

    Hi there
    When you insert the field, look at the options.
    See that option for auto updating? Try clearing it and the field shouldn't auto-populate.
    But note that now the onus is on the help author to ensure they perform the update if they want the date to finally match the current date.
    Cheers... Rick

Maybe you are looking for

  • Using Itunes on a Family computer with multiple devices?

    When i plug my Iphone 3gs into my computer it says that it backs up and syncs alright but i cannot view my own apps on the screen.My sons apps however remain on the itunes screen even after we have signed him out and me back in.How do I view my own a

  • Can no longer see my backups

    Have recently invested in a TC, as my MBP had to go in for repair. I basically backed everything up last week, and it all looked OK. Have today received the machine back, but now when I open time machine, it won't go back further than today. In finde

  • Video screen caps

    I can't seem to figure out how to do this right - I always tend to get just a blue background.... I've been using import to take a snap of a full screen xine window... *thumbs down* Is there something I'm not doing right?

  • How to make in a program periodical​ly switched relay.

    I have a FP-1000(rs 232 controlled) with FP-DO-400 module. I need to switch it on(off) periodically. Something like switching it on every 30 seconds for 1 second. I just do not know how to make using LabView 7.0. I can control it switching manually b

  • Can you delete older time machine backups

    I recently upgraded to a new iMac.  I had been using an external drive for backing up my previous computer.  I would like to use this same drive to back up my new computer; however, I need to delete some of the older backups in order to have enough s