Regarding the Authorization in ABAP-HR

Hi all,
I want to know about the Authorizations in the ABAP-HR. If any body is having any material regarding the can you plz share with me...
thanks in advance,
Suresh

Hi Kutam,
Chk these Links....
Can i have the list of infotypes .
abap hr
http://www.asug.com/client_files/Calendar/Upload/HR_STRUCTURAL_AUTHORIZATIONS.ppt
Reward Points if Useful
All the Best
Gokul

Similar Messages

How do the "Authorization" in ABAP mathch to "Action" in Java?

Recently I am studying the CC of GRC and some concept really confused me. When creating a new function we need to add some related "Actions" to it, but the concept "Action" only exists in SAP Web AS Java scope, not the ABAP scope. How do the authorization concepts in ABAP like "Authorization Object", "Authorizaton" match to things in Java scope? Obviously we need those ABAP authroization unit when defining the risk among the business processes.
Thanks

Hi Dustin,
in CC functions, the term "action" was chosen because we do need to include actions for non-SAP systems, too.
In an SAP ABAP context, this can be translated to "TCODE". When you look at the UME connector in 5.3, "Action" also rings a bell in an SAP context.
Kind regards,
Frank.

Regarding the authorization objects

hi
this is the requirement.
how to provide the authorization for the given transaction code and they provided field for that and some numbers.
please provide me the code for this
thanks in advance

Hi,
Check below code,
AUTHORITY-CHECK OBJECT 'B_ALE_MODL'<- author. object
ID 'ACTVT' FIELD A_ACTVT<-Fields
ID 'CUSTMODEL' FIELD A_CUSTMODEL.<-Field
IF SY-SUBRC <> 0 AND NOT A_OWN_REACTION IS INITIAL.
MESSAGE ID 'B1' TYPE 'E' NUMBER '125'
WITH 'B_ALE_MODL' A_ACTVT A_CUSTMODEL ''.
ENDIF.
Thanks and Regards,
Chandra M

Regarding the authorization based on persinal subarea

dear experts,
                  my company has two offices what we want that in HR that one offices will not see the live datas of another office,for this we have two subarea raipur & raigarh what i did that in the authorization object P_ORGIN i added subarea BTRTL after this whenever i go to "SU01" & assign in the roles it gives THIS error------
*Authorization default values of transaction PC00_M01_CDTB for object P_ORGIN
inconsistent*
WHAT IS THE SOLUTION FOR THIS PROBLEM...
PLEASE suggest me how to restrict the authorization on personal subarea...
Also after adding the fields BTRTL in the object P_ORGIN   i want to remove it again how will i do this......

hi,
Have a look at this pdf.It may help u.
http://www.sap-press.de/download/dateien/726/sappress_authorization_system_engl.pdf
http://wiki.ittoolbox.com/index.php/SAP_HR_-_Check_your_basics-Answers-1#DATA_AND_AUTHORIZATIONS
cheers,
Manoj.

Regarding the Authorizations

Hi all,
I need to give authorization of tcode Like MMPV for one user.
I had done by using PFCG then i went to role and then i given the tcode.
but it is not working , he is getting again the Auth problem

Did you maintain the Authorization data correctly? For eg, MMPV Tcode, is the user trying to create or change or display the tcode?
Also, check if the org structure has been setup correctly.
Lemme know if this helps.
Thanks
Sudhan Shan

Regarding the Start of ABAP.

Hi ,
I am functional consultant with marketing background.
now I want to learn ABAP . starting with ABAP programming.
can you guide me to start with initial abab programming.
please dont tell any institution or books to refer.
point will rewarded
thanks
Kuntla

Hi Gopalkrishna kuntla,
Refer the following link,that will helpful to u for learing abap.
http://www.sap-img.com/abap-function.htm
http://help.sap.com/
http://www.renet-web.net/2005/09/01/changing-standard-sap-field-descriptions/
Dictionary - http://help.sap.com/saphelp_nw04/helpdata/en/4f/991f82446d11d189700000e8322d00/frameset.htm
Hope this helps you,,
Regards,
T.Durai murugan.

Regarding Prepayments,Authorization and capture of funds

Hi..
I have questions regarding the authorization and capture of funds in 11.5.10.2 when the Prepayment concept is used. I have read in OM manual that the authorization and capture happens in AR while creating a receipt.So how can I know that they happen immediately one after other in AR ??? i mean can I look into any columns of particular tables gets populated when authorization happens and some particular field is populated when capturing happens???
Mainly when prepayments are used does the authorization and capture happen in AR only one after other immediately?????
Can some one please help me....
Thanks...

Hi,
when you create the batch-input session, you could set a user-name with the good authorization.
You could ask anybody to call your batch-input in SM35, the authorization of the transaction inside your batch is check with the username set in the batch.
So how did you create your batch-input session ??
Fred

Regarding the PPT or documents to give session regarding the HR- ABAP

Hi all,
Well and wish same from you.. Can please share the PPT or documents to give session regarding the HR- ABAP.
Thanks ,
Suresh

Hi ,
Please send to my personal id [email protected].
Thanks in advance..
Suresh.

WD ABAP: Regarding the url

Hi,
I just installed the netwear2004s for ABAP. My intention is to learn webdynpro. I installed this on a different machine. When I tried to execute some demo web dynpro, I am facing an error regarding the url. The url its trying starts with localhost:....., whereas it should be the system number of that system. When I changed 'localhost' to the corresponding system number, I am able to get the screens
How to change to the system number instead of "localhost"?
Thank you in anticipation.
S V Raja

Hi,
after installation, did you carry out the necessary configuration settings? See http://help.sap.com/saphelp_nw2004s/helpdata/en/43/e86de5008b4d9ae10000000a155369/frameset.htm
Regards, Heidi
PS: See also http://help.sap.com/saphelp_nw2004s/helpdata/en/8c/780741375cf16fe10000000a1550b0/frameset.htm
Message was edited by: Heidi von Geisau

Regarding the clusters in HR - ABAP

Hi All,
Anybody is having the documents regarding the clusters. If so can u please share with me?
Thanks & Regards,
Suresh

Hi Suresh,
Go through the following link.You will get a brief knowledge about clusters in HR
www.hrexpertonline.com/downloads/12-04.doc .
Regards,
Deepthi Reddy

How to set portal authorization in ABAP Webdynpro application

Hi All,
Do you have an idea how to set the visibility for Group UI element based on the Portal user authorization in ABAP Webdynpro , for example if the portal user A(or group A), logins into the portal on click of the ABAP Webdynpro IView then we need to set invisible (hide) the Group UI element in webdynpro ABAP Application.
Do you have any sample code on the same to handle the portal authorization in Webdynpro ABAP?? , please let me know if couldnu2019t understand this requirement or my explanation
Thanks,
PortalUser100

Hi Kris,
Thanks for your reply.
Like however we passed the UserID, can we pass Group ID also to the ABAP Webdynpro application??
Can u get me other things, how to copy of the existing component and i want to give the new name for the component and there i need to modify, i dont want to disturb original component before copy...let me know the procedure for the same??
Regards,
PortalUser100

Wild card "*" usage in the authorization role

Hi All,
I am an ABAP consultant(not a security pro, so please put up with any incorrect wordings), and working on a requirement where i need to check if the user has access to particular values entered on a screen field. For example if the text entered on the field is ABCDEFGUS, i want to check on the last two characters to see if user has access to enter values ending with US.
So i create an authorization object...etc, and in the role i enter US as the value, but now when i run through the code using AUTHORITY-CHECK against the authority object. The authorization passes for all the values i enter, ex: ABCDEFGUK* - this should have failed as i have maintained *US.
Note: but when i maintain the value as ???????US in the role, it works as expected.
All the help and pointers, towards this would be appreciated.
Regards,
Chen

So you will maintain value like #US in your roles and just before authorization check you will amend string.
Hi Martin,
Have you ever tried this and used it in production?
Changing the value sent to the AUTHORITY-CHECK is easy but very intrusive to the data in the program which might be used else where.
Changing the value at runtime which the AUTHORITY-CHECK expects to find is a different ball game (also in performance).
I have done some experimental stuff with this in sandboxes using STATICS in a wrapper for fixed lengths but cannot recommend it at all. I cannot see it ever flying in an AUTHORITY-CHECK statement construct.
It is also completely unauditable to any authorization analysis tool...
Hang on a second... if SPRO can do this then we can as well --> I think we have a winner here!
Cheers,
Julius

What is the difference between ABAP and HR-ABAP?

Hi people,
Could u just tel me abt what is the difference between ABAP and HR-ABAP?
Thanks in advance,
Sanjeev K.V

Hi Sir ,
Please have a look below .Hope it is suitable and simpler solution for your question.
Please do reward if useful.
Thankx.
HR deals with the INFOTYPES which are similar to Tables in General ABAP.
There are different ways of fetching data from these infotypes.
There are different areas in HR LIKE Personal Admn, Orgn Management, Benefits, Time amangement, Event Management, Payroll etc
Infotypes for these areas are different from one another area.
storing of records data in each type of area is different
LDBS like PNP are used in HR programing.
Instead of Select.. we use some ROUTINES and PROVIDE..ENDPROVIDE.. etc
and in the case of Pay roll we use Clusters and we Import and Export them for data fetching.
On the whole Normal ABAP is different from HR abap.
Also,
HR:
HR deals with the INFOTYPES which are similar to Tables in General ABAP.
There are different ways of fetching data from these infotypes.
There are different areas in HR LIKE Personal Admn, Orgn Management, Benefits, Time amangement, Event Management, Payroll etc
Infotypes for these areas are different from one another area.
storing of records data in each type of area is different
LDBS like PNP are used in HR programing.
Instead of Select.. we use some ROUTINES and PROVIDE..ENDPROVIDE.. etc
and in the case of Pay roll we use Clusters and we Import and Export them for data fetching.
On the whole Normal ABAP is different from HR abap.
For Personal Admn the Infotypes start with PA0000 to PA1999
Time Related Infotypes start with PA2000 to PA2999.
Orgn related Infotypes start with HRP1000 to HRP1999.
All custom developed infotypes stsrat with PA9000 onwards.
In payroll processing we use Clusters like PCL1,2,3 and 4.
Instead of Select query we use PROVIDE and ENDPROVIDE..
You have to assign a Logical Database in the attributes PNP.
Go through the SAp doc for HR programming and start doing.
http://www.sapdevelopment.co.uk/hr/hrhome.htm
See:
http://help.sap.com/saphelp_46c/helpdata/en/4f/d5268a575e11d189270000e8322f96/content.htm
sites regarding hr-abap:
http://www.sapdevelopment.co.uk/hr/hrhome.htm
http://help.sap.com/printdocu/core/Print46c/en/data/pdf/PAPA/PAPA.pdf
http://help.sap.com/printdocu/core/Print46c/en/data/pdf/PAPD/PAPD.pdf
http://help.sap.com/printdocu/core/Print46c/en/data/pdf/PYINT/PYINT_BASICS.pdf
http://www.atomhr.com/training/Technical_Topics_in_HR.htm
http://www.planetsap.com/hr_abap_main_page.htm
You can see some Standard Program examples in this one ...
http://www.sapdevelopment.co.uk/programs/programshr.htm
http://searchsap.techtarget.com/originalContent/0,289142,sid21_gci1030179,00.html?Offer=SAlgwn12604#Certification
http://www.erpgenie.com/faq/hr.htm.
http://www.planetsap.com/hr_abap_main_page.htm
http://www.sapbrain.com/TUTORIALS/FUNCTIONAL/HR_tutorial.html
These are the FAQ's that might helps you as well.
http://www.sap-img.com/human/hr-faq.htm
http://www.sapgenie.com/faq/hr.htm
http://www.planetsap.com/hr_abap_main_page.htm
http://www.atomhr.com/library_full.htm
HR Long texts Upload
Look at the below link
And finally,
Few notes are below:
InfoSets in the HR Application
You can use SAP Query in HR to report on HR data. Queries are maintained as described in Creating Queries. The special features of queries created for HR are described in Maintaining Queries in the Human Resources Application. The maintenance procedure for HR InfoSets differs from the described procedure inasmuch as HR data fields are grouped together in infotypes.
InfoSet management in SAP Query is also used for InfoSet Query. For further information, see Functions for Managing InfoSets.
If you want to create InfoSets for HR, you can use logical databases PNP, PNPCE, PAP, and PCH (see HR Logical Databases). The database you must use to create your InfoSet depends on the component in which the data you want to report on is stored.
The reports you can execute using InfoSets based on logical databases PNP (or PNPCE) or PCH are similar, but differ in that they can select different objects. The following table describes the connection between the logical database, and the infotypes you can include in an InfoSet. It also provides you with one or two examples of reports that you can execute using the appropriate InfoSets.
Logical database PNP/PNPCE* PCH PAP
Selection of Persons Objects from Personnel Planning Applicants
Infotypes that can be included in the InfoSet Infotypes for· Personnel Administration (0000-0999) · Time Management (2000-2999) · Payroll infotypes · Infotypes for Personnel Planning objects that can be related to persons If the object type is specified:· Infotypes for the object type · Infotypes for objects that can be related to the specified object typeIf the object type is not specified:· All infotypes · Infotypes for Recruitment (4000-4999)· Some infotypes for Personnel Administration (such as 0001 and 0002)
· Customer infotypes
Reporting examples · Selection of all persons who participated in a specific business event, output of prices for reserved business events · Selection of all persons assigned to a specific personnel area, output of qualifications held by these persons · Selection of all business events held in London in March, output of all persons who participated in these business events · Selection of all positions assigned to a specific organizational unit, output of all persons assigned to the positions · Selection of all applicants hired last year to work on special projects, output of addresses for the applicants selected
Logical database PNPCE (PNP Concurrent Employment) functions just like logical database PNP. The procedure for creating InfoSets is also the same. It only becomes significant if you work with Concurrent Employment.
Creating InfoSets
The maintenance procedure for HR InfoSets differs from the procedure described so far in this section inasmuch as HR data fields are grouped together in infotypes. To set up an InfoSet for the HR application, proceed as follows:
1. On the initial screen for maintaining InfoSets, enter a name for the InfoSet and choose Create.
2. On the next screen, enter a name for the InfoSet and select one of the HR logical databases in accordance with your reporting requirements.
Customer infotypes can be created on all HR logical databases. In each individual case, therefore, you must decide which database to select so that you can report on customer infotypes.
This screen enables you to enter an authorization group. All of the queries that are subsequently created using this InfoSet can only be executed by persons who have this authorization group.
3. Choose .
This takes you to the Infotype Selection for InfoSet screen. You now have the option of creating field groups and assigning fields as required for non-HR InfoSets. Field groups that correspond to infotypes and already contain fields, however, are always created for HR InfoSets. The field groups are displayed in an overview tree in the top right section of the screen.
The infotypes that you included in the InfoSet are displayed in an overview tree on the left of the screen. The infotype fields that are already included in field groups are displayed in a different color, and the corresponding field group ID is displayed.
In the standard system, a field group is created automatically for each infotype that you included in the InfoSet (a field group corresponds to an infotype).
In the standard system, each field group contains the infotype-specific fields. To ensure that working with the InfoSet is as easy as possible, you are advised to restrict your use of fields in each field group to those you really require. This means you should remove fields that are not required.
An infotype's fields must only be assigned to the pertinent field group. Make sure this assignment is correct. If the assignment is incorrect, the InfoSet could be rendered unusable.
When an InfoSet is created, the following fields are transferred automatically to the first field group:
§ Logical database PNPCE or PNP Personnel number
§ Logical database PAP Applicant number
§ Logical database PCH Object ID, plan version, and object type
6. Determine the fields that must be included in the field groups of your InfoSet. If you require further information, see Assigning Fields to a Field Group.
If you want, you can change the default sequence of field groups and fields as required using Drag&Drop.
7. To save the InfoSet, choose .
8. To generate the InfoSet, choose .
On the Change InfoSet (InfoSet name) screen, you can choose Edit ® Change infotype selection to add more infotypes to the InfoSet, or to remove infotypes from the InfoSet. Remember to regenerate the InfoSet afterwards.
This screen also enables you to update InfoSets if, for example, the system contains new additional fields for specific key values. To do so, choose InfoSet ® Additional functions ® Update additional HR fields.
9. Go back to the initial screen for InfoSet maintenance.
10. Choose User group assignment.
11. Select a user group, and save your entry.
sample code
START-OF-SELECTION.
GET pernr.
rp_provide_from_frst p0000 space pn-begda pn-endda.
if pnp-sw-found EQ '1'.
READ TABLE p0001 WITH KEY pernr = p0000-pernr.
if sy-subrc = 0.
write : p0001-plans. " earliest.
endif.
endif.
rp_provide_from_last p0014 space pn-begda pn-endda.
if pnp-sw-found EQ '1'.
READ TABLE p0014 WITH KEY pernr = p0000-pernr.
if sy-subrc = 0.
write : p0014-LGART. .
endif.
endif.

How to add function group to the authorization object S_RFC ?

Hi All,
Can you please tell you how to add the function group FG_DIAGLS_DATA_ENRICHMENT to the authorization object
S_RFC?
In solman_setup under basis configuration when I execute the step "SetupDPC/DCC Web Service URL" its getting failed because of the
following error which i found it in the agent log
"java.rmi.RemoteException:RfcExecutionException; nested exception is:
com.sap.sup.admin.abap.rfc.exception.RfcExecutionException: An
exceptionoccured during the execution of the function
'FM_DIAGLS_PUSH_PHYSICAL_HOST': RFC_NO_AUTHORITY >
com.sap.sup.admin.abap.rfc.exception.RfcExecutionException:An exception
occured during the execution of the function
'FM_DIAGLS_PUSH_PHYSICAL_HOST': RFC_NO_AUTHORITY >
com.sap.mw.jco.JCO$Exception:No RFC authorization for function module
FM_DIAGLS_PUSH_PHYSICAL_HOST. <Mid"
Thanks,
Satheesh E

Hi,
Please follow below steps:
1) Go to SE01
2) Click on create New workbench request and give desc once popup appears, Click Ok
3) Now open the trasport in edit mode
4) Add
Program ID - R3TR
Object Type - FUGR
Object name - Name of the Function group
>note that if you tranport Function group all the latest Function modules in function group along
>with screens will be included in the transport.
Regards
Shital
Formatted by: Vijay Babu Dudla on Apr 25, 2009 5:08 AM

Authorization for ABAP Query

Hello all,
Can I benefit a little from your experience with SAP Query(ABAP) and Adhoc Query(ABAP)?
My customer want to use both SAP Query and Adhoc Query.
And they want to separate for SAP Query as preset report program and Adhoc Query as general-purpose reporting tool.
And I want to know how to separate authorizations of SAP Query and Adhoc Query as below.
As for SAP Query, users can only execute and cannnot change or delete it.
As for Adhoc Query, users can save Queries they created or changed in Adhoc Query.
I know there is only one authorization object for SAP Query:S_QUERY
Is there any solution for that kind of request?
Thanks and Regards,
Hanae

Hello,
We have check in the abap program ask you functional to give the authorization object i.e. y_k_autchk
and ask him for which filed we have to give authorizaion.
AUTHORITY-CHECK OBJECT y_k_autchk
ID 'WERKS' FIELD y_wa_tvarv-low.

Regarding the Authorization in ABAP-HR

Similar Messages

Maybe you are looking for