Problem with HR Authorization

Question

Dear Experts,
One of our requirements in HR is that we do not want users to execute standard reports for all infotypes and personnel areas. So we have created roles based on infotypes and personnel areas for auth object P_ORGIN.
Authorization level        R
Infotype                       0000, 0001, 0002, 0105, 1000, 1001
Personnel Area            DE*
Employee Group          *
Employee Subgroup     *
Subtype                      *
Organizational Key       *
We have assigned this profile to a user and when we run the standard reports with this userid, it works perfectly i.e., I do see the output for the PERSAs starting with DE only.
We have a requirement to change a standard report to add few extra fields in the output...The problem is that the changed report shows me all the PERNRs...The standard report shows the PERNRs with PERSAs starting with DE but the custom one shows all PERNRs. Ofcourse the PERNRs with PERSAs not starting with DE don't show up any values...It just displays the PERNR and all other blanks....
Any ideas on why the authorizations not working for the custom report ?

Answer 1

You have to add the authorization object code something like bellow shown in start of selection event.
  AUTHORITY-CHECK OBJECT 'P_ORGIN'
           ID 'INFTY' FIELD '0169'
           ID 'SUBTY' DUMMY
           ID 'AUTHC' FIELD 'W'
           ID 'PERSA' DUMMY
           ID 'PERSG' DUMMY
           ID 'PERSK' DUMMY
           ID 'VDSK1' DUMMY.
Dont forget to add the authorization object even in transaction used to invoke your reports.