New structural auth. profile

Hello!
I need to remake old profile (O-S-P) - keep all structure, but delete authorization on personnel numbers in top (O1).
O1
P1
P2
O2
P3
P4
O3
P5
=>
O1
O2
P3
P4
O3
P5
It's possible using combination of standard evaluation paths?
May be I need to create profile for
O2
P3
P4
O3
P5
+ the head
O1?
Thanks in advance!

So, you want to show Organisation Unit level O1, but not the positions under level O1? But you still want to show Org Units and positions for O2 and O3?
I don't think this is possible with standard evaluation paths.
Not sure why you'd want to do this either....!

Similar Messages

Restrict HR Authorization Object PLOG By HR Structural Auth Profile

Via OSS Note 453786, SAP requested customers not to use HR Authorization Object PLOG_CON.
We have a requirement to restrict HR Authorization Object PLOG by HR Structural Authorization Profiles. How are other customers able to accomplish this objective without authorization object PLOG_CON being used?
(Custom solution: ZPLOG_CON/custom FM, or use HRBAS00_STRUAUTH BADI)?
Thank you,
Ken

Ken,
1. the note you mentioned is specific to sap version 46b. is that the version your client is on? just wanted to check.
2. then you have not mentioned anything about the requirement, i mean explicit details.. without which it is very difficult to come to a solution.
3. you look like you are on the right track of thinking though with the z-auth-object/function module/badi thingy...
4. ultimately solution is dependant on the explicit requirements.
the 'con' bit usually refers to context sensitiveness of security when a mixture of regular and structural auths would not meet the security requirements.... so at a high level:
1. design the structural profile with the right combo of eval path and function module(z-fm?)
2. do the right thing by plog by explicitly mentioning levels of suths for all objects and subtypes and infotypes as well.
3. use p_origincon to assign the structural profile
4. a combination of all of the above should do the trick...
good luck
cheers

HR PA and Planning (PD profile) changes not updating auth profiles of users

PROBLEM:
We are on ERP version 6 since 2008. We started experiencing this problem December last year and now it is all over our system. As soon as employees are transferred or new appointments are made in HR on PA or if the PD profile is changed in planning the changes cannot be seen by the user in their auth profile. The user can literally not see the newly appointed employee on the org structure or even newly created org units and positions are not visible. When RE_RHAUTH00 is run on the user name the update indicates that the changes (new employee and new org unit) is linked.
The following updates run every night: RHPROFL0_DAILY_UPDATE and RHUATUPD_NEW. I have also run PFUD during the day to make sure all updates go through. We have also "played" with some profiles with PD profile changes but it is as if the profile remains completely static. We have looked for personnel lists and deleted them to no avail. Our Basis administrator has cleared the buffer for us and has run report RSUSR405 that did not do anything. We have searched through notes on Support packages and have just loaded and tested support pack 46 to 53. The only work around seems to be to delete the user and create a new user and then it seems to easily accept new changes.

Hi,
Yes, please make it scheduled background job. This is normal procedure.
Define periodicity on your business needs: some run it every night, some every hour.
Cheers

Users Are Not Removed From Old Position Via Structural Auth

Hello...
Has anyone experienced an issue where someone move from one position into a new one, the old reporting manager can still see this person information via structural auth? There's a general structural profile with the evaluation path o-s-p and function module RH_GET_ORG_ASSIGNMENT which is assigned to all accounts in the system. This profile works as intended when Person A moves to a different position reporting to Manager B. Manager B can view Person A information (time, personal, etc.); however, the system does not remove Person A from Manager A. In addition, the RHPROFL0 is scheduled twice a day.
Thanks for any insights or thoughts on this issue.

Hmm...
Which release and SP are you on?
Also check the depth of the profile (just in case the employees were demoted...) and the period (although you mention that it should be current only).
I have only been involved is custom implementations of "structural authorizations" because the standard is quite tricky and complex to find an error or inconsistency - so hopefully one of the other gurus who are more familiar with it can help as well.
Cheers,
Julius

Need to deactivate structural auth. check for a custom Report

Hi all experts:
I have a report that is based on PNPCE logical database and it displays work hours for a project, all non-sensitive information. We would like a wide range of users to have access to this but since this is based on PNPCE logical database whenever a user runs it, the str. authorization check is performed. I have tried deactivate this check with P_ABAP object and coers 2 but it only ignores infotype auth. check but still checks the structural. We don't want to expand str. profile for users.
Do you know if there is a way to deactive this just for one report?
Your help will be greatly appreciated.
Regards,
Net

Thanks Kiran. I had tried that value but still got the same message. I am having problem understanding exactly when this value 2 ignores structural authorization because it works on some reports and not others. Anyway, we implemented BADI for this report to ignore structural auth. check and it is working fine.
Thanks again,
NT

Error in F4 unknown field in structure service profile CRMD_SERWI

Hello,
I just added new Service Profiles and when Im creatin a new Service and adding a Reject service Profile the search field is empty and the message says:
Error in F4 unknown field in structure service profile CRMD_SERWI
Someone know how to analyse WebClient UI search help.
Kind Regards

Hi David,
(even it is very old post am giving an approach which may help others)
If you check the value table, CRMD_SERWI you'll find that there is NO standard Search Help for field SRV_SERWI (Service Profile). So this is the main reason, SAP is not providing any F4 help in WEB UI screen as well , Still you are asked to provide F4 Help. So value table approach would not work.
So try the following approach(do changes according to your requirement)
1. Create one custom Elementary search help (e.g. ZZCUSTF4) in SE11 with following details ---
                            a> Selection Method = CRMD_SERWI_T
                            b> Parameters as --- SRV_SERWI and DESCRIPTION
                            c> For SRV_SERWI , check the Importing Flag and LPos = 1
                            d> For DESCRIPTION, put LPos = 2
2. Now redefine GET_V_propname method in the CNxx class. Please refer the following code (need to change according to your requirement) to trigger your custom F4 Help.
DATA:
         ls_map    TYPE if_bsp_wd_valuehelp_f4descr=>gtype_param_mapping,
         lt_inmap TYPE if_bsp_wd_valuehelp_f4descr=>gtype_param_mapping_tab,
         lt_outmap TYPE if_bsp_wd_valuehelp_f4descr=>gtype_param_mapping_tab.
       ls_map-context_attr = 'struct.SRV_SERWI'.u201C Screen field's technical name
     ls_map-f4_attr      = SRV_SERWI u201C Field name present in your custom search help, created in step 1.
APPEND ls_map TO: lt_inmap, lt_outmap.
CREATE OBJECT rv_valuehelp_descriptor TYPE CL_BSP_WD_VALUEHELP_F4DESCR
    EXPORTING
      iv_help_id        = 'ZZCUSTF4' u201CCUSTOM Search help name created in step 1
      iv_help_id_kind   = f_bsp_wd_valuehelp_f4descr=>help_id_kind_name
      iv_input_mapping = lt_inmap
      iv_output_mapping = lt_outmap.
Hope this helps you.
Thanks & Regards,
Vishnu

Can I creat the structural authorization profile in batch?

Hi All:
I have a question.
I need to creat structural authorization profile in transaction code OOSP, it's OK if I enter new entries in the OOSP and then maintenance the authorzation profile like object type; object ID; Eval. path and so on.
But there are so many new entries need to be created that I want to use lsmw to realize batch in put.
But when I use the transaction code "OOSP' to record the screen during the LSMW, I failed to see the "athorization profile maintenance" screen , that is, I can enter new entry, give it a name and text still, but cannot maintenance the authorzation profile like object type; object ID; Eval. path. In other words,the "athorization profile maintenance" screen is missing during the LSMW recording screen!
Can anyone tell me what's the reason?

Hi All:
I have a question.
I need to creat structural authorization profile in transaction code OOSP, it's OK if I enter new entries in the OOSP and then maintenance the authorzation profile like object type; object ID; Eval. path and so on.
But there are so many new entries need to be created that I want to use lsmw to realize batch in put.
But when I use the transaction code "OOSP' to record the screen during the LSMW, I failed to see the "athorization profile maintenance" screen , that is, I can enter new entry, give it a name and text still, but cannot maintenance the authorzation profile like object type; object ID; Eval. path. In other words,the "athorization profile maintenance" screen is missing during the LSMW recording screen!
Can anyone tell me what's the reason?

Can I Create a New Structured App that's a Copy of a Current One?

Here's the situation: I am new to using Dita in Framemaker, but have become competent with the authoring process. I do not understand the development end of things very well, however. What I want to do is to have a second dita structured application that is identical to the first in every way except that in topic.template.fm, the page size will be set to 11x17, not 8.5x11. And I want to be able to apply that structured application to some of my DITA documents, but not all of them.
I tried to create such a situation, first by copying and then renaming the DITA folder (I called the new one DITA-BIG) in Adobe FrameMaker 8\structure\xml\ and, within DITA-BIG, making that small change to topic.template.fm.
I then added the renamed structured app to structuredapps.fm (again, I did a copy and paste of the DITA-Topic-FM element already there), changing the name of the element to Dita-TopicBig-FM and the URLs to point to those in the DITA-BIG directory.
The new structured application appears in Framemaker when I select StructureTools --> Set Structured Application, and I can select/apply it to one of my documents. However, the document's page size doesn't change. I tried saving the document, closing and reopening the document, closing and reopening Framemaker. The new, larger page size set in topic.template.fm in the DITA-BIG structured app. is ignored.
If I change the page size in the original topic.template.fm file, the document that is supposedly using the new structured app changes size to correspond to the template in the old structured app. But I need that original template to stay at its original 8.5x11 page size.
I am new to working with such files so I don't know if I missed something or if what I am attempting cannot be done.
Any advice?

Ok, it worked.
Thank you very much for your help and patience with my followup questions.
I want to describe one more thing that was not obvious to me. When I got all of this done and tried to get a help topic to use the new template, I did it wrong at first. What I tried was to open the xml file, then open the StructureTools menu and select "Set StructuredApplication." From the long list of applications that appears, I chose Dita-Topic-Bigpage-Fm (my applicaiton clone that contained the modified template). Then I saved the file, but didn't notice any changes in my page size. Even closing and reopening the file and closing and reopening Framemaker, didn't seem to have an effect. When I chose any other structured application (do not try this at home!) I got pretty spectacular results: many error messages, and one time it crashed Framemaker. But nothing happened when I chose my "bigpage" clone application.
Eventually I tried to set the structured application when I opened up the xml file. At File - Open, a little window always appears that lets you select a few structured application choices among the many available.When I did this, the file finally opened with the large page size specified in my cloned application.
Keywords:
clone a template
clone a structured template
cloning a template
copy a template
copying a template
use a different structured template
use two structured templates
use another template
apply another structured template
copy a structured application
clone structured application
apply my own structured application
use two structured templates
use two structured applications
dita structured applications

I would like to add a new Canon camera profile to the RAW interface

Hi, I would like to add a new Canon camera profile to the RAW interface.
I have recently installed the new camera profile 'Studio Portrait' which i download from here:
http://www.canon.co.jp/imaging/picturestyle/file/studio-portrait.html
When I open up a RAW files in Camera RAW, go to 'Camera Calibration', click on the drop down list called
'Camera Profile' I only see 'Adobe Standard, Faithful etc etc'.
My questions are, can i add the same camera profile i put in my camera, into a folder with in photoshop?
Or is photoshop reading the raw file and only seeing the default camera profiles?
If I could see the new camera profile listed it would help with work flow.
Best
JL-B
Please help, ive not had a good time waiting on the phone and trying to explain this to a live chat, hours have been wasted. Once i know the answer I can get back to the commission.

Are you following this
Apply a camera profile
To apply a camera profile, select it from the Camera Profile pop-up menu in the Camera Calibration tab of the Camera Raw dialog box. The Adobe Standard profile for a camera is named Adobe Standard. Camera Matching profiles include the prefix Camera in the profile name. The Camera Profile pop-up menu displays only profiles for your camera.
If the only profile in the Camera Profilemenu is Embedded, it means that you have selected a TIFF or JPEG image. Adobe Standard and Camera Matching profiles work only with raw images.
Note: If you have selected a raw file and Adobe Standardand Camera Matching profiles do not appear in the Camera Profilepop-up menu, download the latest Camera Raw update.

Creating a new Structure in SAP

Dear all,
I am patching a BAPI and need to create a new structure BAIPKOMFKTX as instructed by SAP Note 581263.
The instructions are clear except that it does not indicate what delivery class to use for this new structure. Could anybody please advice what delivery class to use? Should I use delivery class 'S' - System Table, Maint only by SAP, change = modification
Best Regards,
Junwen

Hello Klaus,
Thank you for pointing this out. This was my first attempt at creating a structure. After exploring with the various options in SE11, it seems i should create a 'structure' by selecting the radio button 'DataType'.
Best Regards,
Junwen

I am getting the following error when i am trying to check in new created content profile

Hi All,
I am getting the following error when i am trying to check in new created content profile as:
An error has occurred. The stack trace below shows more information.
!csUserEventMessage,weblogic,localhost:16200!$!csServiceDataException,CHECKIN_NEW_SUB,validateStandard!$!syParameterNotFound,dDocTitle
intradoc.common.ServiceException: !csServiceDataException,CHECKIN_NEW_SUB,validateStandard!$
*ScriptStack CHECKIN_NEW_SUB
3:doScriptableAction,**no captured values**3:doSubService,**no captured values**CHECKIN_NEW_SUB,**no captured values**3:validateStandard,dDocName=myucm-005202
at intradoc.server.ServiceRequestImplementor.buildServiceException(ServiceRequestImplementor.java:2115)
at intradoc.server.Service.buildServiceException(Service.java:2260)
at intradoc.server.Service.createServiceExceptionEx(Service.java:2254)
at intradoc.server.Service.createServiceException(Service.java:2249)
at intradoc.server.ServiceRequestImplementor.handleActionException(ServiceRequestImplementor.java:1766)
at intradoc.server.ServiceRequestImplementor.doAction(ServiceRequestImplementor.java:1716)
at intradoc.server.Service.doAction(Service.java:477)
at intradoc.server.ServiceRequestImplementor.doActions(ServiceRequestImplementor.java:1458)
at intradoc.server.Service.doActions(Service.java:472)
at intradoc.server.ServiceRequestImplementor.executeSubServiceCode(ServiceRequestImplementor.java:1322)
at intradoc.server.Service.executeSubServiceCode(Service.java:3866)
at intradoc.server.ServiceRequestImplementor.executeServiceEx(ServiceRequestImplementor.java:1200)
at intradoc.server.Service.executeServiceEx(Service.java:3861)
at intradoc.server.Service.executeService(Service.java:3845)
at intradoc.server.Service.doSubService(Service.java:3760)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at intradoc.common.IdcMethodHolder.invokeMethod(IdcMethodHolder.java:86)
at intradoc.common.ClassHelperUtils.executeMethodEx(ClassHelperUtils.java:310)
at intradoc.common.ClassHelperUtils.executeMethod(ClassHelperUtils.java:295)
at intradoc.server.Service.doCodeEx(Service.java:550)
at intradoc.server.Service.doCode(Service.java:505)
at intradoc.server.ServiceRequestImplementor.doAction(ServiceRequestImplementor.java:1643)
at intradoc.server.Service.doAction(Service.java:477)
at intradoc.server.Service.doScriptableAction(Service.java:3807)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at intradoc.common.IdcMethodHolder.invokeMethod(IdcMethodHolder.java:86)
at intradoc.common.ClassHelperUtils.executeMethodEx(ClassHelperUtils.java:310)
at intradoc.common.ClassHelperUtils.executeMethod(ClassHelperUtils.java:295)
at intradoc.server.Service.doCodeEx(Service.java:550)
at intradoc.server.Service.doCode(Service.java:505)
at intradoc.server.ServiceRequestImplementor.doAction(ServiceRequestImplementor.java:1643)
at intradoc.server.Service.doAction(Service.java:477)
at intradoc.server.ServiceRequestImplementor.doActions(ServiceRequestImplementor.java:1458)
at intradoc.server.Service.doActions(Service.java:472)
at intradoc.server.ServiceRequestImplementor.executeActions(ServiceRequestImplementor.java:1391)
at intradoc.server.Service.executeActions(Service.java:458)
at intradoc.server.ServiceRequestImplementor.doRequest(ServiceRequestImplementor.java:737)
at intradoc.server.Service.doRequest(Service.java:1890)
at intradoc.server.ServiceManager.processCommand(ServiceManager.java:435)
at intradoc.server.IdcServerThread.processRequest(IdcServerThread.java:265)
at intradoc.idcwls.IdcServletRequestUtils.doRequest(IdcServletRequestUtils.java:1343)
at intradoc.idcwls.IdcServletRequestUtils.processFilterEvent(IdcServletRequestUtils.java:1715)
at intradoc.idcwls.IdcIntegrateWrapper.processFilterEvent(IdcIntegrateWrapper.java:222)
at sun.reflect.GeneratedMethodAccessor133.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at idcservlet.common.IdcMethodHolder.invokeMethod(IdcMethodHolder.java:87)
at idcservlet.common.ClassHelperUtils.executeMethodEx(ClassHelperUtils.java:305)
at idcservlet.common.ClassHelperUtils.executeMethodWithArgs(ClassHelperUtils.java:278)
at idcservlet.ServletUtils.executeContentServerIntegrateMethodOnConfig(ServletUtils.java:1600)
at idcservlet.IdcFilter.doFilter(IdcFilter.java:352)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:111)
at java.security.AccessController.doPrivileged(Native Method)
at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:313)
at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:413)
at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:94)
at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:161)
at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:136)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:111)
at java.security.AccessController.doPrivileged(Native Method)
at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:313)
at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:413)
at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:94)
at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:161)
at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3715)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3681)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2277)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2183)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1454)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:178)
Caused by: intradoc.data.DataException: !syParameterNotFound,dDocTitle
at intradoc.data.DataBinder.getEx(DataBinder.java:1251)
at intradoc.data.DataBinder.get(DataBinder.java:1050)
at intradoc.server.DocServiceHandler.validateStandard(DocServiceHandler.java:1257)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at intradoc.common.IdcMethodHolder.invokeMethod(IdcMethodHolder.java:86)
at intradoc.common.ClassHelperUtils.executeMethodReportStatus(ClassHelperUtils.java:324)
at intradoc.server.ServiceHandler.executeAction(ServiceHandler.java:79)
at intradoc.server.Service.doCodeEx(Service.java:533)
at intradoc.server.Service.doCode(Service.java:505)
at intradoc.server.ServiceRequestImplementor.doAction(ServiceRequestImplementor.java:1643)
... 79 more

Your error states:
!syParameterNotFound,dDocTitle
Can you confirm that your profile includes all required data, specifically, the dDocTitle? Fix this issue, then re-check your logs. if there are other missing required parameters, fix each one.
Eventually, you should have a successful check-in.
Hope this helps,
-ryan

Essbase client missing after creation of new windows user profile

I created a new windows user profile after an apparent corruption of my old one. However, when I open Excel, the Essbase client (add-in) is gone. Smartview is still there. The client doesn't show up after registering Essbase Add-In is executed. I can add the client by navigating to C:\Hyperion\products\Essbase\EssbaseClient\bin and selecting essxleqd.xla and essxcln.xll. The add-in then appears to be installed. However, when I try to connect to Essbase, the connection dialog box does not show up. I'm on version 11.1.1.3 and Excel 2007.
Is there a way to resolve this short of re-installing the client? Any advice would be appreciated.
Thanks in advance.
dave

I remember the Essbase add-in used to be a small executable of a few MB that was easy to install. It's my understanding that they went to the global installer where they include various product assemblies. The files needed to run the global installer for a simple add-in amount to close to about 4GB in size. Our VPN for remote users is very slow and takes forever to install. I see ther is still a small executable for the Smartview install. Is there a small executable for the Essbase add-in somewhere that I'm not aware of? I can reinstall if that's what it takes. I was hoping there might something a bit less time consuming.
Thanks John.
Edited by: DAS80220 on Jun 28, 2011 7:50 AM

Treo 700P with contacts - need advice on synchronizing with new outlook user profile

Hello Treo Experts.
I have a Treo 700P.
It is full of contacts.
I have a new Outlook user profile and am unable to synchronize between the Treo and Outlook.
I deinstalled Palm SW and reinstalled it
I am about to 'syhncronize the Treo with my computer
my question is: Is this safe to do? I don't want to lose all my contacts on my Treo.
Any suggestions - greatly appreciated!
Post relates to: Treo 700p (Verizon)
Post relates to: Treo 700p (Verizon)

Hi.. Welcome to the Palm forums. You should be fine, the contacts on the device should write to outlook and combine with what ever is in outlook.
Post relates to: Centro (Sprint)

'New Structure' in the Query Designer

Hi,
I know these questions might be very silly but i want to get the best picture about reporting in BW. Is there a restriction that we could create only 2 new structures in both rows and colums or isn't there any rule.Any kind of explanation would be of great help.
Thanks,
Anjali.

Hi Anjali,
I am not sure if I undertand, what you are looking for.. you can (in 3.0B) only create one structure per row or column. However you can create 2 types of structure elements. "New Selection" and "New formula". Is that what you are reffering to?
If yes, one is a selection that can consist of key figures and characteristics.
The other is a calulation based on available structure elements or formula variables.
Both enable you to create complex "drilldowns"
regards,
Michael

HR context structural auths and unrelated personnel IDs

Hi,
we are working on HR SAP 4.7 SAP R/3 Enterprise with these patch levels:
COMPONENT Rel Liv. Supp.Pack. Descr.
SAP_BASIS 620 0038 SAPKB62038 SAP Basis Component
SAP_ABA 620 0038 SAPKA62038 Cross-Application Component
SAP_APPL 470 0020 SAPKH47020 Logistics and Accounting
SAP_HR 470 0028 SAPKE47028 Human Resources
EA-HR 200 0009 SAPKGPHB09 SAP R/3 Enterprise HR Extension
We are using only context structural authorizations (P_ORGINCON) with these switches:
ADAYS 15 HR: tolerance time for authorization check
APPRO 0 HR: Test procedures
DFCON 4 HR: Default Position (Context)
INCON 1 HR: Master Data (Context)
NNCON 0 HR:Customer-Specific Authorization Check (Context)
NNNNN 0 HR: Customer-specific authorization check
ORGIN 0 HR: Master data
ORGPD 4 HR: Structural authorization check
ORGXX 0 HR: Master data - Extended check
PERNR 1 HR: Master data - Personnel number check
XXCON 0 HR: Master Data - Enhanced Check (Context)
Everything works fine except for personnel IDs not linked to OM.
If we use PA40 to assigne an "unrelated object" (personnel IDs) to the OM structure, the
action works correctly.
We are not able to assign a unrelated personnel IDs to OM using PPOM.
Even if we have assigned the value 4 to both DFCON and ORGPD, we have to create a large
structural autorization with maintain flag active (the same as ALL in OOSP) and assign it to
the user in order to see the button "unrelated object" in PPOM.
In other words: it seems that unrelated personnel IDs need structural authorizations in order
to be assigned in OM.
Any idea ?
Is this a bug ?
Thanks
Andrea Cavalleri

There are many ways of doing this depends which one you like....
1. Create a custom Function Module which will perform end to end extraction of desired Objects. There is no need to pass on some inputs for evaluation path. Just while creating structural, keep everything blank except for the last column to put your custom FM. This is a technique to control Structural using FM only.
2. In a structural use two lines...one might be with standard FM, other one should pick specific objects which you don't want user to have access. Ensure to check exclude beside that line. The Intention is to remove undesired objects from populating in OOSB.
3. Implement a BADI which will be executed after RHBAUS* programs are run, whose objective should be to identify these CIDs and remove them from T77UU table or INDX or from OOSB.
Please do not confuse P_ORGINCON with structural authorization. The integration of PA and structural authorization is to provide different level of access to set of objects pulled by structural auth.
There can be plenty other ways to do it.....HR Security is a playground where multiple games can be played at a time

New structural auth. profile

Similar Messages

Maybe you are looking for