Restricting Employees from enrolling or changing benefits

Hi All,
We have a new Legal plan introduced this year in employee benefits. I want to restrict employees from enrolling or changing this benefit if the life event is not Hire or Open.
I made the Hire and Open life events eligible. Do I need to make all other life events Ineligible or making these two eligible is enough? Having only these two eligible is not stopping me from enrolling in them when "Dependent lost eligibility" event triggered.
Any help or any pointers greatly appreciated.
Thanks,
CAH

Bump

Similar Messages

How to restrict employees from accessing managers data using custom security profile

Hi,
I am using custom security profile for restricting the employees from accessing supervisors details(PG.SEGMENT2=4). I have written the custom code as below :
Responsibility :US Super HRMS Manager
ASSIGNMENT.PERSON_ID
IN
(SELECT PAF.PERSON_ID FROM PER_ALL_PEOPLE_F PAF,
PER_ALL_ASSIGNMENTS_F PF,
PAY_PEOPLE_GROUPS PG,
PER_PERSON_TYPE_USAGES_F PPU,
FND_USER FNU
WHERE PAF.PERSON_ID=PF.PERSON_ID
AND :EFFECTIVE_DATE BETWEEN PAF.EFFECTIVE_START_DATE
AND PAF.EFFECTIVE_END_DATE
AND PF.PEOPLE_GROUP_ID=PG.PEOPLE_GROUP_ID
AND :EFFECTIVE_DATE BETWEEN PF.EFFECTIVE_START_DATE AND PF.EFFECTIVE_END_DATE
AND PPU.PERSON_ID=PAF.PERSON_ID
AND PPU.PERSON_ID=PF.PERSON_ID
AND :EFFECTIVE_DATE BETWEEN PPU.EFFECTIVE_START_daTE AND PPU.EFFECTIVE_END_DATE
AND PAF.PERSON_ID=FNU.EMPLOYEE_ID
AND PAF.PERSON_TYPE_ID =2
AND PPU.PERSON_TYPE_ID
IN(2,62)
and PAF.person_id = FND_PROFILE.value('user_id')
AND PG.SEGMENT2=8)
and using "restrict the people visible to each other using this profile".
I have assigned the security profile to HR user responsibility
But when I query the supervisor name in HR User responsibility , it is not restricting me from viewing supervisor details.
When I query for first time, its restricting me to view others details, but when I close that click on torch button and try searching, its allowing me to access manages details.
Can any one please let me know what setups need to be done for restricting employees from viewing supervisors data.
I have gone through the document "Understanding and Using HRMS Security in Oracle HRMS" but didn't got any idea.
Please suggest.
Thanks & Regards,
Anusha.

Hi All ,
i solved the problem by using event 01 of header view and using the table "Extract" .
Regards,
Neha

Restrict employees from charging time to projects they are not assigned to

Can anyone help me on how tr restrict the employees from charging time to project networks that they are not assigned to?
I have assigned the resource to the project network and can see that in the CAT2 worklist but I am not able to restrict employees from charging time agains projects that they are no assigned to.

You have to validate the data in CATS Userexit.IMG - Cross application components - Time sheet - Customer specific modifications - Create SAP enhancements for the time sheet. Here is a short overview on what they are called and what they do.
CATS0001 (Set up worklist): This one defines a worklist in the upper part of the CATS screen
CATS0002 (Supplement recorded data): Here you can add values to customer defined additional fields or even modify the data entered by the user
CATS0003 (Validate recorded data): This one is to check entries for whatsoever
CATS0004 (Deactivate functions on the interface): CATS got a lot of buttons. Here you can get rid of the ones you don't need.
CATS0005 (Customer field enhancements): You can add fields to CI_CATSDB here to later on use to display or enter additional data
CATS0006 (Validate entire time sheet): Mainly serves to validate the hours entered if you don't use HR
CATS0007 (Subscreen on Initial screen): Customer popup, defines data valid for the entire time sheet(row)
CATS0008 (Determine recipients for the approval workflow): You can connect CATS to a standard workflow so that superiors can approve times entered before they are transferred (HR, CO, PS...)
CATS0009 (User-Defined Text Fields in the Data Entry Section): You got two 40 character text fields in the data entry part you can fill with this exit - display only
CATS0010 (Display User-Defined Fields in the Worklist): Same as above for the worklist
CATS0011 (Customer-Defined Functions): Add your own functions to the menu
CATS0012 (Customer Subscreen): Define CATS header
CATP0001 (Determine Target Hours): Define your own target hours

LSO: How to restrict employee from accessing LSO Web based course.

Hi Gurus,
We have a requirement where we need to restrict few section of employees from accessing the LSO web nased courses. I know this can be done from Structural Authorization concept.
Can anyone tell me how to implement this structural authorization of section of employees. or any link mentioning step-by-step process will be great help.
Thanks,
Swet

Hello Satya,
The status comes from entries in Table T77BW. I don't recommend that you change the status as I don't know what issue may occur.
Relevant coding in RHPQ_INDIVIDUAL_PLAN_READ.
IF history_tab-endda < sy-datum.            "begin note 588403
pplans_tab-state_id = att_state_id.
pplans_tab-statetxt = att_statetxt.
ELSE.
SELECT SINGLE * FROM t77bw INTO wa_t77bw
           WHERE context = 'EVENT_BOOK'.
IF wa_t77bw-new_state IS INITIAL.
    pplans_tab-state_id = '02'.
ELSE.
    pplans_tab-state_id = wa_t77bw-new_state.
ENDIF.
Regards,
Manny

Restrict users from making repository changes

We want to restrict certain users from making workbench/repository changes. Is this possible through transaction PFCG by roles? If so, what authorizations do I need to customize?

In a nutshell users should have limited authoriztions to items of S_DEVELOP auth. object.
Regards,
Mike
Message was edited by: Mike Puzankov

Restrict Employee From Updating a Particular Hours Type

Hi..
We have the following scenario.
1. We have 3 types of Elements defined for OTL i.e. Regular Hours , Overtime Weekend and Overtime Weekday.
2. The Regular hours are integrated with the client's time Machine.
3. Each night the regular hours are updated for each employee.
4. Now as per the client, the employee can update/add Overtime Weekend and Overtime Weekday but should not be able to update the regulars hours (created through Interface).
can anyone kindly update us, how can we achieve this requirements (it may be a setup or fast formula).
Thanks
Regards

Dear User,
We don't have any preferences to update/Modify for any element.
If there is anything available can you please clarify. We are on version 12.06.
Regards

How to restrict the user from making any changes in Sales order- item level

Hi to all
How to restrict the users from making any changes in sales order at item level if the same sales order is released by senior user through status profile.
Regards
Anish Parikh
Edited by: anish parikh on Jan 24, 2008 5:16 AM

Hi Anish,
This can be achieved through the roles and authorization.
This can be done through the basis team. they can create user profiles and roles.
For the roles they assign some transaction codes so that they can view the only assigned tr. codes.
Like that ur requirement can be done.
Also u can prevent the user to change any fields in the sales order screen (VA02). for that please modify the authorisations.
Hope i answers.
Reward points if useful.
Edited by: kaleeswaran bhoopathy on Jan 24, 2008 9:57 AM

Restricting user from changing price in me22n after goods receipt

i want to restrict the users from changing the price of the material in me22n after after goods receipt.
pls tell me the userexit for it with detail.

Okay, then let me play the role of the bad man.
Why would you need to restrict users from changing a price after GR ?
Do you think that users are changing prices just for fun or to mess up the system?
Have you talked to users why they want change the price after a GR?
do you have an alternative plan, for the case that the price really needs to be changed to be able to post the invoice? do you want to cancel always the GR in this case? Is is possible? What if the stock is already issued? do you then want to cancel the entire chain? what if a month end closure was already done?

Restrict users from changing roles

Is there a way to restrict users from changing roles
themselves? If a user goes to My Connections and then clicks Edit,
they could, in theory, change to any group they want--except to the
administrator group because you have to enter a password. If the
admin isn't watching the site 24/7, the user can change their roll,
let's say from a writer to a publisher, and publish something
before the admin can notice.
Is there anything that can be done to restrict that?

You can use connection keys...this will only allow a user to
change their name and email address (I think...I can check on this
tomorrow). We use these at my work and it allows for a lot more
control over who is assigned to the proper groups.

Restricting Administrators from Changing Learner Groups

Our current practice is to have diffenrent OLM Administrators, but want to know if there is a way to restrict them from making changes to Learner Groups that are created by other OLM Administrators. Currently these Administrators can change any learner group within the overall organization. We want it limited to only theirs. Is there some functionality that can restrict them from doing so?

I appreciate your help with this. Perhaps we can at least attempt an enhancement request. :-0 The whole idea for the seperate admin groups was so that they couldn't manipulate the information input by the other admin groups.
Thanks Again....

How can I stop Firefox 's private browsing mode from restricting Netlflix from storing settings on my computer?

I have a Netflix subscription, which is supposed to let me watch movies online, on its website. However, when I selected one of their "Instant Viewing" movies, a page popped up, saying: "Silverlight Application Storage Error -- Firefox's private browsing mode is restricting Netflix from storing settings on your computer. To resolve this problem, perform the following steps: Click the Tools menu at the top of the browser and select Stop Private Browsing " if enabled.
There is no such "Tools" tab/menu at the top of my Firefox browser; there's only a drop-down box with various headings, but "Tools" is not among them.
How do I fix this thing with Netflix?

This will be an old message written before the Firefox button came into common use.
* use '''Firefox button -> Stop Private Browsing'''
* see [[Private Browsing - Browse the web without saving information about the sites you visit]]
* you may also need to review your History settings<br/>[[Settings for privacy, browsing history and do-not-track]]
Note there is a further change in Firefox 20, that will provide Private Browsing on a per Window basis, allowing you to use some tabs for Private Browsing, whilst most behave normally and save information. The help (kb) articles should be automatically updated to cover this.

Need to restrict users from adding or modifying folders or reports

Requirement: Need to restrict users from adding or modifying folders or reports through Info view and to reflect the modifications only thriough LCM.
Issue: Customer wants to restrict users from adding or modifying existing reports from Infoview and need to force users to do make the changes through Life cycle manager tool.
As per my understanding LCM can only be used to to promote folders and objects from one environment to another and to schedule the promotion of these jobs on a daily basis.My query is:
Can we add or modify existing reports or folders using the LCM tool?
Could you please help me out in this issue and provide me your suggestions.
Thanks in advance.
Prashanthi Rayaprolu.

You can not restrict that using LCM. Need to modify the rights at the folder level.
Explicitly remove the following rights for the user group,
Add objects to the folder
Edit objects
Delete objects
Copy objects to another folder (check this if required)
Once the above four are denied then users wont be able to Edit/Add/Delete reports in that folder.

Restrict users from editing and deleting not owned items

Hello guys.
I'm trying to restrict users from editing and deleting items created by other users. I know, that it can be achieved by using SPList.WriteSecurity parameter, but if I change its value to 2 or 4 - nothing happens...
May be there are some list permissions that can override this security setting? I tried to combine permissions in different ways but users either cannot modify any items or can edit/delete all of them...
By the way, setting ReadSecurity=2 works as it should work regardless of user permissions...
Please help.

Hi,
I understand that you want to change the write security for the document library. You can try the PowerShell script below:
$web = Get-SPWeb http://serverURL
$list = $web.Lists["Document library"]
$list.ReadSecurity = 2
$list.WriteSecurity =2
$list.Update()
$web.Dispose()
This setting will not affect the site collection administrator, he will always be able to edit the documents. You need to sue another account to have a test. If this still doesn't work, I think you need to manually edit the permission for each documents.
Thanks,
EnTan Ming
Entan Ming
TechNet Community Support

Steps required while moving employees from one organisational

Can any one explain and write down steps required while moving employees from one organisational unit to other organisational unit.
regards

Hi ganesh,
Firstly create the new position for the employee if it is not already existing.
Then goto SPRO : Personnel Man. -> Pers. Adm-> Customizing procedures -> Actions -> Define infogroups -> infogroup.
Only Copy 0001 is enough.
Then Setup personnel actions with this infogroup.
Then go to PA40 and execute this action for that specific employee.
You will only need to change the position assignment, org unit, job, vs all come from position info.
Regards,
Dilek
Edited by: Dilek Ersoz on Oct 14, 2008 9:41 AM

Restricting user from ODBC, SQL PLus, Toad etc

Hello,
We would like to restrict user accessing database from anyODBC driver, s/w like Toad or sqlplus. They can only access dataabse through loggin to Application. Is there a way to do it.
I have been looking into VPD but could not find any info there.
Thanks
Suhail

Don't you need to be able to create a session before you can invoke a secure application role?
What, exactly, are you trying to prevent. Are you trying to prevent well-meaning users from discovering that they can use Access to "fix" the data in the database when there are problems? Or are you trying to prevent a rogue employee from being able to access the database with anything other than your application?
If it is the former, something simple like a login trigger that checks the program used to log in would probably work. If it is the latter, I fear you are out of luck. If your application can connect, a moderately competent hacker can access the database rather quickly, particularly if he has access to your application executable.
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC

Restricting Employees from enrolling or changing benefits

Similar Messages

Maybe you are looking for