HR data entry folks can maintain their own records

HR data entry folks can maintain their own records.  This was discovered recently during a security review.  This is a huge segregation of duties and SOX issue.  How can we restrict the access of HR data entry clerks so that they can't maintain their own records?

Hi,
Structural authorization need not be present in your system for using object P_PERNR, auth object P_PERNR works with simple position based security(personnel number has to be assigned to each user and PA infotypes restricted via object P_ORGIN) as well. P_PERNR restricts access to infotypes/subtypes maintained for one's own personnel number.
The object field PSIGN is used to restrict this access. PSIGN= I means one would have access to certain infotypes and their subtypes( specified in INFTY and SUBTY fields of the object) for own personnel number and PSIGN= E means no access to those infotypes and subtypes for self. Also, PSIGN= * is equivalent to value I.
You can activate this object via OOAC/ table T77S0 as specified in above post.
Hope this clarifies.
Sandipan

Similar Messages

  • HT2542 one mac,2 profiles. Can each profile maintains their own iTunes but share same apple ID?

    Hi,
    one mac air created with 2 profiles.
    Can each profile maintains their own iTunes but share same apple ID?

    How so? We bought it and it would all be on one computer.

  • Can we split accounts so each person can spend their own money, but still share the same librar

    right now we have one itunes library, one apple id and 2 devices. so when we put an itunes card on the account, it is a race for who can use up the $ first.  We are adding a 3rd device.   I want to split the accounts so each person can spend their own money, but i still want them to share the same library(the library is in a shared area on the computer)
    we have been thinking about just setting up a new apple id for the new device.  i am worried that when we sync, that it will wipe out all the existing stuff.
    Thanks for your help.

    You can create as many individual user accounts on a Mac as you like. Then, any one or more of those users can remotely log in from another Mac and use that Mac as their own, simultaneously. Each account will remain separate from all others.
    However, since each user needs to have a Mac to do that, I'm not sure how you could effectively double the number of users as you describe.

  • If you log out of your apple ID on your iPad and let someone else use it and they use facetime.  How come it shows my facetime history and not theirs?   I do not want them to have access to my history.  How can I prevent that and they can see their own?

    If you log out of your apple ID on your iPAD mini and let someone else use it and they use facetime.  How come it shows my facetime history and not theirs?   I do not want them to have access to my history.  How can I prevent that and they can see their own?  Or is the history associated with the iPAD mini itself and not the actual icloud user account?

    You are logging out from
    Settings -> FaceTime, right?
    My guess would be though, that the FaceTime history is stored locally on the device, so anyone using it will see the entire device history (I cannot imagine that FaceTime uploads the history to an Apple server anywhere - I'm sure it is just logged locally on the device - based on my iPhone and iPad show completely different histories, for example).

  • How to configure security so users can delete their own file(s)?

    I have configured our file server so that all users can write/modify in any other user's folder. However, it seems that they cannot delete their own file(s) in another user's folder. Do I have to give all users the "Modify" but not Full permission
    so that every user can delete their own file or folder even if it's in another user's folder? I still do not want user A to delete/modify any files/folders that user B originally created.
    Any help is much appreciated.

    Hi,
    Based on my research, if a user can rename a file/folder, then he/she can save it using the original name, there is no way to prevent this via permission assignment.
    You may need to use scripts to achieve this.
    Best Regards,
    Amy Wang

  • AP Invoice Workflow through AME: how to setup requesters can approve their own Invoices -Self approval

    Hi All,
    I have a requirement Where Requesters should  approve their own invoices without supervisors intervention in approvals through Approval Management Engine (AME), how can i achieved this.
    I am using:
    RDBMS : 11.1.0.7.0
    Oracle Applications : 12.1.3
    Please guide me through this.
    Thanks

    Please refer to the following docs.
    What are the Setups To Accomplish Self Approval When Integrated with Approvals Management Engine (AME) and Oracle Procurement? [ID 554223.1]
    Master Reference For AME Based Requisition Approval In R12 [ID 1207863.1]
    Thanks,
    Hussein

  • Creating an interface with several video windows where a user can connect their own camera to window

    Hi,
    I posted this in the Flash Media Live encoder Forum and it may have been the wrong place to get an answer.
    currently I use the following workflow for Live video streaming.
    I have FMLE on a computer streaming the Video feed to my FMS.
    I currenlty use  Dreamweaver to create window with a few instances of a video window and one of the windows is configured to rtmp to my server and the stream name of the stream I have setup in FMLE.
    This then streams to one of the windows.
    I then assign a different Stream name to the other windows.
    I send an FMLE client to a user in the locations that want to have a video presence on the webpage.
    I send them instructions and running FMLE and the parameters to use to get their camera up and running.
    This works fine to a point.
    Most of the users are not technically minded and so often this leads to issues and delays to get these things to work.
    I want to move on and improve this flow.
    I want to create the video instances on the page where:
    Below each video window is a text input field where a user can type in their name which will be used as the stream name.
    Below each video window is a button that the user clicks to connect their camera automatically without having to install FMLE.
    Once the video feed is running, only that user can click the button again to disconnect it. ( The button changes to "Stop Broadcast" etc).
    I have looked at the structure of Ustream for example, and this seems to be the method they use as you can download the XML file of your channe,l and the RTMP URL and stream name can be copied and then used directly in FMLE and you can stream with more control of your camera that way.
    Can you please provide instructions or guidance on how to begin this process?
    thanks

    Hi,
    Thanks for your interest in this kind of workflow.
    There are multiple ways to do it. Adobe Connect does this seamlessly.
    But to try out few of the latest technlogies, I recommend trying RTMFP. There is a hosted server where you can try out your sample client applications. There is also client application made similar to what you are looking for.
    Please go through http://labs.adobe.com/technologies/cirrus/

  • HT204266 I would like my kids to have separate itunes accounts under my umbrella itunes account so they can separate their own gift cards.  Is there a way to do this?

    I would like my kids to have separate accounts within my iTunes umbrella acct to manage their gift cards and purchases.  Is there a way to do this?

    You can set up accounts for them, but they will be completely separate. There is no "umbrella" account or global management where you can view and control multiple accounts. You'll have to log into each iTunes Store account separately to redeem gift cards, view purchases, etc. To set up a new iTunes Store account for each child, each will need a separate email address.
    Regards.

  • How do I set up a separate itunes account for my 11 year olds so that they can have their own apps and music?

    Just bought a new ipad for my twins' 11th birthday. Would like them to have a separate account for their apps and music only (that I control, of course)Not sure how to do this.

    check out method one from this support article:
    How to use multiple iPods, iPads, or iPhones with one computer

  • After making a book from iPhoto and showing it to friends, they now want one printed for them.  Is there a way I can share it with them so they can order their own or do I have to print it for them?

    I created a book using iPhoto and it turned out great.  So much so that when I showed the book to people they wanted to order one for themselves.  Is there a way they can order the book without me having to order them?

    You have to order it for them
    LN

  • HT201304 How do i create a profile for my iPad. so i can have a profile and my children can have their own profile?

    I need help with reating profiles on my ipad. Can someone please tell me how you creat profiles. I would like one profile for adults and one for chidlren.

    You can't create different profiles or user accounts on the iPad. It was not designed that way. It was designed as a single user device - no matter what you see in the TV commercials.
    You can use passcode lock the iPad, you can set up restrictions in order to prevent purchasing of apps, prevent changing mail accounts, dsiable using FaceTime, using Safari and you can age restrict some content as well in the restrictions.

  • How can my users add their own texts in my website

    Hello there. I really looking for an answer to this. I want my users can add their own texts on an image in my website. I find this feature in some design sites. Please respond, i really want to handle this. Thanks.

    Hi Peren,
    I am afraid that this is not possible in Muse at this stage, I will recommend that you post this on our ideas section over here, https://forums.adobe.com/community/muse/ideas, and let our devs team know of this requirement.
    - Abhishek Maurya

  • HT5622 Should my family share one apple id or each have their own?

    Should my family share one apple id or each have their own?  I want to be in control of the id and password since my kids are 10 and 12.

    Personally I would give them their own ID each because you'll end up syncing all of your data onto their phones if you share one.
    This way you can set individual passwords for their IDs and therefore have control so that they can't go on an itunes spending spree (if that is a concern).
    As soon as you feel they can do as they please with their phones just tell them their passwords or allow them to change it. This way they can do their own thing with minimal fuss.
    I hope this helps.

  • Multipe discussion boards within one site collection, each with their own email?

    So we use several list servs and these have become an issue and the data is lost discussion based on you cannot collectively house and search for information and attachments.
    I have a few questions that maybe you could help in my research:
    1) Is SharePoint discussions capable of having multiple discussion boards in one site collection, each with their own email address to replace the function of a list serv (so at a minimum content can be organized, with attachments available, and replies
    can be seen/sent via email.)
    2) From an attachment perspective; what is the best way to ensure virus blocking in the above scenario IF the above scenario is able to be done
    3) Is there OOTB functionality here or is there a recommended third party product? (I am not looking to build out a custom solution if at all possible to avoid that)
    any thoughts or input here would be greatly appreciated!
    ~Kat

    1) - Yes, discussion boards are just specially formatted lists and yes, each discussion board can have their own email address.
    2) -  Blocked file types can be configured in CA and I believe that SP will strip out any emails with blocked file types attached (not 100% on that, probably 95% sure)
    3) All out of the box (assuming SP will block the attachments as I assumed in #2

  • If I want to add a family member who is not in my household and has their own itunes account and credit info...

    If I want to add a family member who is not in my household and has their own itunes account and credit info...will all their purchases be charged to my credit card as the Organizer?

    Hi mbostick, 
    Welcome to the Apple Support Communities!
    The only way a family member can use their own funds and not the Organizer’s account for purchases would be with store credit, such as an iTunes gift card. 
    Family purchases and payments
    Making purchases
    After you set up your family, any time a family member initiates a new purchase it will be billed directly to your account unless that family member has gift or store credit. First, their store credit will be used to pay the partial or total bill. The remainder will bill to the family organizer. As the family organizer, any receipts generated by the transaction will be sent to you. Learn more about how iTunes Store purchases are billed.
    Have a great day,
    Joe

Maybe you are looking for