Hr ps report in manger desktop

Question

hi!
i created a report combining hr ps data not using logical DB.
i am trying to execute the report via manger desktop transaction PPMDT.
the problem is that there is no authorization check done , even though the specific user has authorizations( including structural authorizations).
how can i execute it trough PPMDT and have an authorization check?
regards
yifat

Answer 1

What kind of HR data are you reading?  How can you read HR data without reading infotypes?
I guess the question is how do you want to keep the user to only see his organizational unit.  There are two options.
1.  Code all necessary authorization checks into your program since you are not using LDB.
2.  The way that we have set up our MDT Reports is to be called via a custom function module with the following interface:
"----"*"Local interface:
*"  IMPORTING
*"     VALUE(ACT_FCODE) LIKE  MWBFCDDEF-FCODE
*"     VALUE(ACT_PLVAR) LIKE  OBJEC-PLVAR OPTIONAL
*"     VALUE(ACT_OTYPE) LIKE  OBJEC-OTYPE OPTIONAL
*"     VALUE(ACT_OBJID) LIKE  OBJEC-REALO OPTIONAL
*"     VALUE(ACT_BEGDA) LIKE  OBJEC-BEGDA DEFAULT SY-DATUM
*"     VALUE(ACT_ENDDA) LIKE  OBJEC-ENDDA DEFAULT SY-DATUM
*"  EXPORTING
*"     VALUE(ACT_PROGNAME) LIKE  SY-REPID
*"     VALUE(ACT_SCREEN_NO) LIKE  SY-DYNNR
*"  TABLES
*"      ACT_OBJECTS STRUCTURE  HRSOBID OPTIONAL
*"  EXCEPTIONS
*"      OTHERS
Once you create the function module it gets set up in MDT config.  The table ACT_OBJECTS contains the objects passed in through manager's desktop.  It should have all of the relevant PERNRs.
However it is not recommended to rely on this to secure data.  You should still code the necessary authorization checks into your code.
Chris