Structural authorisation along with organisational key

Hi All:
The scenario is:There are 8 company codes(8 diff countries) with 8 diff Personnel areas.A user needs to have access to all employees in his country and secondly, all the HR employees spread over all other company codes in different org units.
I can create role using P_ORIGIN with that PA and assign to the user but how do i provide him access to all other HR employees.Structural Authorisation would restrict access to a specific org unit which doesn't suffice both criteria as it overrides org key.
Helpful answers would be duly rewarded.
Regards,
Kmaini

Hi,
Structural authorization does not overwrite org.key.
You need to customize structural authorization accordingly.
For example, you have 8 company codes associated with personnel areas PA01-PA08. You are trying to create role for company code 1.
1. In P_ORGIN you give access to all personnel areas PA01-PA08.
2. For structural authorization you create following entry points:
- root org.unit for company 1
- HR org unit for company 2
- HR org unit for company 3
- HR org unit for company 4
- HR org unit for company 5
- HR org unit for company 6
- HR org unit for company 7
- HR org unit for company 8
Cheers

Similar Messages

Storing encrypted username and password along with the Key into Windows Keystore

I have a WPf application and I need to allow the user to enter the username and password. Username and Password should be encrypted and store them with the key into the windows Keystore. I used the Cryptography class to encrypt the username and password but
I am not sure how to store them in the Windows Key Store.
This login is used for configuration purpose only. User enters and it is saved into the clients machine. As long these credentials are correct, we are going to allow this machine to call another API to download files.
I would really appreciate for any sample code. Basically, I need to store them in the registry and be able to call them to verify.

Data encryption and key management is certainly not a WPF topic so you are in the wrong forum but you could take a look at the ProtectedData class:
https://msdn.microsoft.com/en-us/library/system.security.cryptography.protecteddata.aspx.
It provides methods for encrypting and decrypting data on user or machine level. Please refer to the following link for more information:
http://stackoverflow.com/questions/4967325/best-way-to-store-encryption-keys-in-net-c-sharp
Here is another link on the subject that may be helpful:
http://stackoverflow.com/questions/7459069/where-to-store-sensitive-information-needed-for-an-application-to-run
Please remember to mark helpful posts as answer to close your threads.

Escape key not responding, along with FN keys -Sattelite L300

ok so this has been occuring for a little while, not sure since when, but very recently
basicly, the escape key wont respond to programs, and neither will most of the FN keys, FN F10+F11 work, the LED's light up, but the rest of the FN's do nothing
the escape key responded to a keyboard testing program, it came back as responsive and working, but in programs such as a 3D engine and MSN Messenger, escape refuses to respond and work as it should
it hasnt always been like this, theyve worked before, ive had the laptop since christmas, had to take it back because the wireless card broke

Go to:
http://eu.computers.toshiba-europe.com/innovation/download_drivers_bios.jsp
and download the TVAP package for Vista (32bit I assume).
Uninstall the current TVAP in Control Panel -> Programs and Features
Reboot and install the new TVAP
ps. You need to burn the Recovery Discs yourself, ensure you use good quality media to avoid problems.

DBMS_CDC find only the columns that are changed along with the primary key in the table

Hello,
We are having a requirement to find the change data in the production environment.
We are planning to use the DBMS_CDC utility.
But for example in the create change table 1 picked emp_id,ename, address, salary,dob.
I have a sample data of
empid
ename
address
salary
DOB
1
test1
24 test street
2000
20-Jan-98
2
test2
25 test street
2500
15-Aug-97
if ename for empid 1 is changed to test1_test3 from test1.
My CDC is capturing the values in the old and new values in the 5 columns.
But i need to get only the empid (primary key of the source table) and the ename column as only that's been updated not the rest of the 3 columns.
Can i accomplish this.
Please advice.

Hello,
Thanks for the information.
but if i change the change table then i will miss the other columns right?
I want to get the columns( empid and ename) only if ename is changed. i.e when ever any column in emp table changes i need to get all the columns where the data is changed along with the primary key columns empid.
Is there any way i can tweak the parameters so that i can achieve this or is there any other way using the cdc i can get this data.
Thanks

I have Photoshop 12, installed online. My computer crashed and was repaired, but Photoshop was not restored. I see it in my products, along with the serial number/activation key, but no download is available. How do I re-download my product?

I have Photoshop 12, installed online. My computer crashed and was repaired, but Photoshop was not restored. I see it in my products, along with the serial number/activation key, but no download is available. How do I re-download my product?

Unfortunately, only Adobe customer service can assist you with your issue. These are user forums; you are not addressing Adobe here.
Click on the link below, and after that click on "Still need Help? Contact us."
Then on the next page, click Chat.
There is also a phone option. 1 (800) 833-6687
http://helpx.adobe.com/contact.html?step=PHXS_downloading-installing-setting-up_licensing- activation

Dialog structure along with table maintenance

Hi All,
I need dialog structure along with table maintenance screen. Dialog structure should have nodes in it.
I have two table maintenance now. My dialog structure should have two nodes in that, if i click on first node my first table maintenance should get displayed. One more node under the first node should get displayed when i double click on any of the entries on the first table maintenance.
Path for the example screen like which my screen should look like,
ICLIMG --> Claims -->Business setting --> Correspondence --> Define cliam documents.
Please reply,
Regards,
Megha.

Hi Megha,
Found any solution for this. Actually We have a same kind of requirement now.
Please help.
Regards,
SK

Organisational keys are assigned based cost centre associated with Bus Area

Hi ,
I need to add the authorization check in the Z* program Within TE, restrictions are being implemented based upon organisational key. Organisational keys are assigned based upon whether or not the cost centre has an associated business area. If a business area exists, then a restricted organisational key (in range US01* to US50*) is assigned. Otherwise, a non-restricted organisational key is used.
Can any one help me !
Thanks,
Nelson

The authorization check for trip statistics reporting has a maximum of three stages:
Before displaying the selection screen
Before the selection screen is displayed a check is made as to whether the user has the authorization to view just his own trip data, or also the trip data of other employees.
The following check is made:
AUTHORITY-CHECK OBJECT 'P_TRAVL'
ID 'AUTHP' FIELD 'E'
ID 'BUKRS' DUMMY
ID 'PERSA' DUMMY
ID 'KOSTL' DUMMY
ID 'PERSG' DUMMY
ID 'PERSK' DUMMY
ID 'VDSK1' DUMMY
ID 'PTZUO' DUMMY
ID 'AUTHF' DUMMY
ID 'AUTHS' DUMMY.
If the employee only has authorization to view his own data, the personnel number is determined using the Infotype Communication (0105). This personnel number is then displayed in the selection screen of the relevant report and can not be overwritten.
If the Infotype 0105 has not been maintained the program ends abnormally and an appropriate error message is issued. No further checks are made as the employee can only display his own data.
If the employee has the authorization to display the data of other employees as well, further authorization checks are made during the processing of the personnel and trip data.
During processing of personnel data
The following check is made for every personnel number read from the database:
AUTHORITY-CHECK OBJECT 'P_TRAVL'
ID 'AUTHP' DUMMY
ID 'BUKRS' FIELD pa0001-bukrs
ID 'PERSA' FIELD pa0001-werks
ID 'KOSTL' FIELD pa0001-kostl
ID 'PERSG' FIELD pa0001-persg
ID 'PERSK' FIELD pa0001-persk
ID 'VDSK1' DUMMY
ID 'PTZUO' DUMMY
ID 'AUTHF' DUMMY
ID 'AUTHS' DUMMY.
If the check is successful, the trip data for the personnel number is processed, if unsuccessful, the personnel number is ignored.
During processing of trip data
The following check is made for each selected trip:
AUTHORITY-CHECK OBJECT 'P_TRAVL'
ID 'AUTHP' DUMMY
ID 'BUKRS' FIELD pa0001-bukrs
ID 'PERSA' FIELD pa0001-werks
ID 'KOSTL' FIELD pa0001-kostl
ID 'PERSG' FIELD pa0001-persg
ID 'PERSK' FIELD pa0001-persk
ID 'VDSK1' DUMMY
ID 'PTZUO' DUMMY
ID 'AUTHF' FIELD authf
ID 'AUTHS' DUMMY.
The AUTHF field has 3 positions:
Position 1: S - Statistics data for reporting
Position 2: - Request status of trip
Position 3: - Settlement status of trip
If the check is successful, the selected trip is displayed in the report list, if unsuccessful, the trip is ignored.

Beginning with Structural Authorisations

Good day fellow SAP HCM Community,
Our company is currently investigating the option of going via structural authorisations for our HCM system security but we are struggling to set it up.
Please advise if anybody has some documentation on the following:
1. What is the values in the table OOSP for a manger and a sub-ordinate?
2. Do we need to assign a PD profile to each position in the org structure whether a SAP user or not?
3. What is the relationship for a manger and a subordinate on the postion, i.e. A002 - B002, etc.
4. In order for a manager to view their subordinates do they all have to be indicated as chief positions as we have a complex management hierarchy?
5. The function module RH_GET_MANAGER_ASSIGNMENT and RH_GET_ORG_ASSIGNMENT is not available to our DEVLAB client, does it need to be visible in order for structural authorisations to work.
Kind regards
Dorianne

Update your B card or send me a test mail. I will send you doc

Who's Who with Structural Authorisations

Hi,
We have implemented structural authorisation.
When manager logins to portal and view Who's who he is able to see only team members data.
Instead our requirement is to view all the employees data in Who's who though manager has structural authorisation profile.
Structural authorisation we have implemented only for the user who are (PORTAL+R\3).
<< Moderator message - Everyone's problem is important >>
Thanks,
Usha
Edited by: Rob Burbank on Oct 18, 2010 3:39 PM

Check the following link:
Authorization Made Easy
http://www.slideshare.net/Juanfe1978/1ux2y54tcwomq2gtx7pd
Authorization Concept for SAP Student Lifecycle Management
http://www.sdn.sap.com/irj/bpx/go/portal/prtroot/docs/library/uuid/409acd1d-75d1-2a10-4a91-dadabd18e1ff
Technical Considerations in Global SAP BW HR Implementations
http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/505351fe-ec8c-2910-c5b5-a43bbf53f6fc
Hope this help you.
Regards

My midi keyboard is playing multiple sounds when I press a key. Like when I play a note on the piano preset, there is a snare hit or a shaker that plays along withe the note. Is there a setting I need to change to get rid of it?

this recently happened, never had the problem before. I've restored my midi keyboard to factory settings but the problem persists. I go into garage band and click on the piano preset, but when I play a note it plays multiple instruments. Say I hit the C note On my keyboard, it plays the C note, but along with it is a snare hit or a shaker. And this is for every note. It seems as though the keyboard has its own setting, but I've tried resetting it. Again it's never happens before, just recently is there a way to get rid of that background sound? It's very dufficu to make music with multiple instruments playing in one note!

If it happens again the make sure that you aren't suppressing website colors.
Make sure that you allow pages to choose their colors and that you haven't enabled High Contrast in the Accessibility settings.
*Tools > Options > Content : Fonts & Colors > Colors : [X] "Allow pages to choose their own colors, instead of my selections above"
*https://support.mozilla.org/kb/Options+window+-+Content+panel
*http://kb.mozillazine.org/Website_colors_are_wrong
*http://kb.mozillazine.org/Websites_look_wrong

Structural Authorisation & Position Based Role Mapping ( Indirect Roles)

Hi
I have few queries on Structural Authorization & Position Based Role Mapping (Indirect Role Assignment).
This is a public sector implementation. We are migrating from the traditional based (assigning roles to users) to Indirect role assignment.
1. Can we integrate both structural authorizations and position based role mapping in one system?
2. If we implement structural authorizations and position based role mapping in a single system, then do we need to assign the role to the chief position or it would automatically have the authorizations which are assigned to the users below chief position.
3. First step do we need to create the users in SU01 / SU10 or can we create the entries in PA30. Which one comes first or both independent.
4. If the user moves from one position to the another position then there would need to be a grace period of shift over of Roles. Where do we maintain the shift over value of days. Do we need to maintain in both.
Any help or suggestions on the above would be appreciated.
Thanks and Regards
Arun R

Hi
1. Can we integrate both structural authorizations and position based role mapping in one system?
Yes you can. Structural authorisations and position based role mapping can be assigned to the same org plan in SAP.
2. If we implement structural authorizations and position based role mapping in a single system, then do we need to assign the role to the chief position or it would automatically have the authorizations which are assigned to the users below chief position.
No, the SAP role is unique to the postion it is assigned to. But remember not all employees will be assigned to a position - in this case you have to assign the sap role directly to the user in SU01/SU01
3. First step do we need to create the users in SU01 / SU10 or can we create the entries in PA30. Which one comes first or both independent.
Create user in SU01.SU10 first before creating infotype 105 in PA30.
4. If the user moves from one position to the another position then there would need to be a grace period of shift over of Roles. Where do we maintain the shift over value of days. Do we need to maintain in both.
*When a users assignment in the org structure changes then you must run RHRPROFL0 to update the user assignment to the new position.
Also the number of days an employee can have access to their previous data is controlled by the parameter is called ADAYS - tx OOAC . SAP currently defaults this to 15 days and this is used to control the number of days that the employee can still access the data they created even though they are assigned to a different organisation with different authorisations.
Hope this helps.
Charmaine

How to include body of the mail along with attachment using the below FM

Hi All,
I am using the FM 'SO_NEW_DOCUMENT_ATT_SEND_API1' to generate an e-mail with excel file as attachment. Can you please let me know how to include body of the e-mail along with this attachment.
Thanks & Regards
Gowthami

hi,
see this code
TABLES: apqi.                         "Queue info definition
TYPES DECLARATION
*& Global Types
TYPE-POOLS: slis,                     "Type for alv list
            sx.                       "SAP connect
TYPE-POOLS: list.
*& Types
TYPES: BEGIN OF s_itab_apqi.
        INCLUDE STRUCTURE apqi.
TYPES: END OF s_itab_apqi.
           INTERNAL TABLE / WORK AREA DECLARATION             *
*& For email attachment
DATA:   it_message TYPE STANDARD TABLE OF solisti1 INITIAL SIZE 0
                WITH HEADER LINE.
DATA:   it_attach TYPE STANDARD TABLE OF solisti1 INITIAL SIZE 0
                WITH HEADER LINE.
DATA:   it_packing_list LIKE sopcklsti1 OCCURS 0 WITH HEADER LINE,
        it_contents      LIKE solisti1 OCCURS 0 WITH HEADER LINE ,
        it_receivers     LIKE somlreci1 OCCURS 0 WITH HEADER LINE ,
        it_attachment    LIKE solisti1 OCCURS 0 WITH HEADER LINE ,
        it_object_header LIKE solisti1 OCCURS 0 WITH HEADER LINE .
DATA:   v_cnt            TYPE i                                   ,
        v_sent_all(1)    TYPE c                                   ,
        v_doc_data       LIKE sodocchgi1                          ,
        gd_error         TYPE sy-subrc                            ,
        gd_reciever      TYPE sy-subrc                            .
DATA: p_email   TYPE somlreci1-receiver
                             VALUE 'mail id here of the reciever'.
*&   Variable for attachment name
DATA: v_attach(12).
*&   Internal table to get data from apqi table
table here
DATA: ws_line TYPE slis_listheader.
DATA: it_list_top_of_page TYPE slis_t_listheader.
CONSTANTS : v_formname_top_of_page TYPE slis_formname VALUE 'TOP_OF_PAGE'.
VARIABLE DECLARATION
DATA: v_colpos        TYPE i.
DATA: v_transcnt(10) TYPE c,
      v_transcnte(10) TYPE c,
      v_transcntf(10) TYPE c,
      v_msgcnt(10)    TYPE c,
      v_qid(20)       TYPE c.
DATA v_tot_rec(3)    TYPE n.
DATA :v_date(10) TYPE c,
      v_time(8) TYPE c .
DATA: v_fromdate(10) .
DATA: v_todate(10) .
SELCTION SCREEN
SELECTION-SCREEN BEGIN OF BLOCK blk1 WITH FRAME TITLE text-015.
PARAMETERS:
SELECTION-SCREEN END OF BLOCK blk1.
AT SELCTION SCREEN
AT SELECTION-SCREEN.
IF p_dfrom IS INITIAL AND
     NOT p_dato IS INITIAL.
    MESSAGE e000(zp) WITH text-020.
ENDIF.
START OF SELECTION
START-OF-SELECTION.
*& To get data from APQI table into internal table
PERFORM populate_itab.
**To Populate table with details to be entered into .xls file
PERFORM build_xls_data_table.
END OF SELECTION
END-OF-SELECTION.
*& To display ALV list when IT_APQI is not initial
IF NOT it_apqi[] IS INITIAL.
*&-- Send an Notification email
    PERFORM send_email .
*&--To populate fields for ALV
    PERFORM build_fieldcat   .
    PERFORM build_eventcat   .
    PERFORM e04_comment_build USING it_list_top_of_page[].
    PERFORM build_layout     .
    PERFORM build_sortcat    .
    PERFORM start_list_viewer.
ELSE.
*&-- If no record exists in IT_APQI internal table then message is displayed
    MESSAGE s000(zp) WITH text-021.
ENDIF.
FORMS **********************************
populate itab here -
*&      Form BUILD_FIELDCAT
FORM build_fieldcat .
ENDFORM.                    " BUILD_FIELDCAT
*&      Form BUILD_EVENTCAT
FORM build_eventcat .
DATA: v_header(25) .
CONCATENATE 'ZPIPY016' p_dfrom p_dato INTO v_header.
CALL FUNCTION 'REUSE_ALV_EVENTS_GET'
    EXPORTING
      i_list_type     = 0
    IMPORTING
      et_events       = it_eventcat[]
    EXCEPTIONS
      list_type_wrong = 1
      OTHERS          = 2.
READ TABLE it_eventcat WITH KEY name = slis_ev_top_of_page
                             INTO wa_eventcat.
IF sy-subrc = 0.
    MOVE v_formname_top_of_page TO wa_eventcat-form.
    APPEND wa_eventcat TO it_eventcat.
ENDIF.
ENDFORM.                    " BUILD_EVENTCAT
*&      Form BUILD_LAYOUT
FORM build_layout .
ws_layout-no_keyfix           = 'X'.
ws_layout-group_buttons       = 'X'.
ws_layout-colwidth_optimize   = 'X'.
ENDFORM.                    " BUILD_LAYOUT
*&      Form BUILD_SORTCAT
FORM build_sortcat .
CLEAR wa_sortcat.
CLEAR v_colpos.
ENDFORM.                    " BUILD_SORTCAT
*&      Form START_LIST_VIEWER
FORM start_list_viewer .
DATA: ws_pgm LIKE sy-repid.
*& To Display ALV list
ws_pgm = sy-repid.
CALL FUNCTION 'REUSE_ALV_LIST_DISPLAY'
    EXPORTING
      i_callback_program = ws_pgm
      is_layout          = ws_layout
      it_fieldcat        = it_fieldcat
      it_sort            = it_sortcat
      i_save             = 'A'
      it_events          = it_eventcat
    TABLES
      t_outtab           = it_apqi
    EXCEPTIONS
      program_error      = 1
      OTHERS             = 2.
ENDFORM.                    " START_LIST_VIEWER
*&      Form BUILD_XLS_DATA_TABLE
FORM build_xls_data_table .
CLASS cl_abap_char_utilities DEFINITION LOAD.
CONSTANTS: con_tab TYPE c VALUE cl_abap_char_utilities=>horizontal_tab,
             con_cret TYPE c VALUE cl_abap_char_utilities=>cr_lf.
*& To populate it_attach table to be send as email.
CONCATENATE 'Error of transaction SM35' ' '
     INTO it_attach SEPARATED BY con_tab.
CONCATENATE con_cret it_attach INTO it_attach.
APPEND it_attach.
*& To gettotal number of error records
DESCRIBE TABLE it_apqi LINES v_tot_rec .
CONCATENATE 'Number of Errors = ' v_tot_rec
            INTO it_attach SEPARATED BY con_tab.
CONCATENATE con_cret it_attach INTO it_attach.
APPEND it_attach.
CONCATENATE text-001
              text-002
              text-003
              text-004
              text-005
              text-006
              text-007
              text-008
              text-009
              text-010
              text-011
              text-012
         INTO it_attach SEPARATED BY con_tab.
CONCATENATE con_cret it_attach INTO it_attach.
APPEND it_attach.
*& To populate it_attach from it_apqi
LOOP AT it_apqi INTO wa_apqi.
*& To get the date format in DD/MM/YYYY
    WRITE wa_apqi-credate TO v_date DD/MM/YYYY.
*& To get time format in hh:mm:ss.
    v_time = wa_apqi-cretime.
    CONCATENATE v_time(2) ':' v_time2(2) ':' v_time4(2) INTO v_time.
    v_transcnt = wa_apqi-transcnt.
    v_transcnte = wa_apqi-transcnte.
    v_transcntf = wa_apqi-transcntf.
    v_msgcnt    = wa_apqi-msgcnt.
    v_qid       = wa_apqi-qid.
    CONCATENATE wa_apqi-groupid wa_apqi-creator
                     wa_apqi-qstate v_date
                     v_time wa_apqi-progid
                     wa_apqi-userid v_transcnt
                     v_transcnte v_transcntf
                     v_msgcnt v_qid
               INTO it_attach SEPARATED BY con_tab.
    CONCATENATE con_cret it_attach INTO it_attach.
    APPEND it_attach .
    CLEAR   it_attach .
    CLEAR: v_transcnt ,
            v_transcnte,
            v_transcntf,
            v_msgcnt   ,
            v_qid      ,
            v_date     ,
            v_time     .
ENDLOOP.
ENDFORM .                    " BUILD_XLS_DATA_TABLE
*&      Form POPULATE_EMAIL_MESSAGE_BODY
FORM populate_email_message_body .
REFRESH it_message.
it_message = 'message here'.
APPEND it_message.
CLEAR it_message.
ENDFORM.                    " POPULATE_EMAIL_MESSAGE_BODY
*&      Form SEND_FILE_AS_EMAIL_ATTACHMENT
FORM send_file_as_email_attachment TABLES pit_message
                                          pit_attach
                                    USING p_email
                                          p_mtitle
                                          p_format
                                          p_filename
                                          p_attdescription
                                          p_sender_address
                                          p_sender_addres_type
                                 CHANGING p_error
                                          p_reciever.
DATA: ld_error    TYPE sy-subrc,
        ld_reciever TYPE sy-subrc,
        ld_mtitle LIKE sodocchgi1-obj_descr,
        ld_email LIKE somlreci1-receiver,
        ld_format TYPE so_obj_tp ,
        ld_attdescription TYPE so_obj_nam ,
        ld_attfilename TYPE so_obj_des ,
        ld_sender_address LIKE soextreci1-receiver,
        ld_sender_address_type LIKE soextreci1-adr_typ,
        ld_receiver LIKE sy-subrc.
ld_email               = p_email         .
ld_mtitle              = p_mtitle        .
ld_format              = p_format        .
ld_attdescription      = p_attdescription.
ld_attfilename         = p_filename      .
ld_sender_address      = p_sender_address.
ld_sender_address_type = p_sender_addres_type.
Fill the document data.
v_doc_data-doc_size = 1.
Populate the subject/generic message attributes
v_doc_data-obj_langu = sy-langu.
v_doc_data-obj_name = 'SAPRPT'.
v_doc_data-obj_descr = ld_mtitle .
v_doc_data-sensitivty = 'F'.
Fill the document data and get size of attachment
CLEAR v_doc_data.
READ TABLE it_attach INDEX v_cnt.
v_doc_data-doc_size =
     ( v_cnt - 1 ) * 255 + STRLEN( it_attach ).
v_doc_data-obj_langu = sy-langu.
v_doc_data-obj_name   = 'SAPRPT'.
v_doc_data-obj_descr = ld_mtitle.
v_doc_data-sensitivty = 'F'.
CLEAR it_attachment.
REFRESH it_attachment.
it_attachment[] = pit_attach[].
Describe the body of the message
CLEAR it_packing_list.
REFRESH it_packing_list.
it_packing_list-transf_bin = space.
it_packing_list-head_start = 1.
it_packing_list-head_num = 0.
it_packing_list-body_start = 1.
DESCRIBE TABLE it_message LINES it_packing_list-body_num.
it_packing_list-doc_type = 'RAW'.
APPEND it_packing_list.
Create attachment notification
it_packing_list-transf_bin = 'X'.
it_packing_list-head_start = 1.
it_packing_list-head_num   = 1.
it_packing_list-body_start = 1.
DESCRIBE TABLE it_attachment LINES it_packing_list-body_num.
it_packing_list-doc_type   = ld_format.
it_packing_list-obj_descr = ld_attdescription.
it_packing_list-obj_name   = ld_attfilename.
it_packing_list-doc_size   = it_packing_list-body_num * 255.
APPEND it_packing_list.
Add the recipients email address
CLEAR it_receivers.
REFRESH it_receivers.
it_receivers-receiver = ld_email.
it_receivers-rec_type = 'U'.
it_receivers-com_type = 'INT'.
it_receivers-notif_del = 'X'.
it_receivers-notif_ndel = 'X'.
APPEND it_receivers.
CALL FUNCTION 'SO_DOCUMENT_SEND_API1'
    EXPORTING
      document_data              = v_doc_data
      put_in_outbox              = 'X'
      sender_address             = ld_sender_address
      sender_address_type        = ld_sender_address_type
      commit_work                = 'X'
    IMPORTING
      sent_to_all                = v_sent_all
    TABLES
      packing_list               = it_packing_list
      contents_bin               = it_attachment
      contents_txt               = it_message
      receivers                  = it_receivers
    EXCEPTIONS
      too_many_receivers         = 1
      document_not_sent          = 2
      document_type_not_exist    = 3
      operation_no_authorization = 4
      parameter_error            = 5
      x_error                    = 6
      enqueue_error              = 7
      OTHERS                     = 8.
Populate zerror return code
ld_error = sy-subrc.
Populate zreceiver return code
LOOP AT it_receivers.
    ld_receiver = it_receivers-retrn_code.
ENDLOOP.
ENDFORM.                    " SEND_FILE_AS_EMAIL_ATTACHMENT
*&      Form SEND_EMAIL
FORM send_email .
Populate message body text
PERFORM populate_email_message_body.
PERFORM send_file_as_email_attachment
                               TABLES it_message
                                      it_attach
                                USING p_email
                                      'Error Sessions from SM35'
                                      'XLS'
                                      'filename'
                                      v_attach
                             CHANGING gd_error
                                      gd_reciever.
ENDFORM.                    " SEND_EMAIL
*&      Form E04_COMMENT_BUILD
      text
     -->E04_LT_TOP_OF_PAGE text
FORM e04_comment_build USING lt_top_of_page TYPE slis_t_listheader.
CLEAR: v_fromdate,
         v_todate.
WRITE p_dfrom TO v_fromdate DD/MM/YYYY.
WRITE p_dato TO v_todate    DD/MM/YYYY.
*& To write header in ALV list
*& Program name
CLEAR ws_line.
ws_line-typ = 'H'.
ws_line-info = text-016.
APPEND ws_line TO lt_top_of_page.
CLEAR ws_line.
ws_line-typ = 'S'.
ws_line-key = text-018.
ws_line-info = v_tot_rec.
APPEND ws_line TO lt_top_of_page.
*& Date from
CLEAR ws_line.
ws_line-typ = 'S'.
ws_line-key = text-050.
ws_line-info = v_fromdate.
APPEND ws_line TO lt_top_of_page.
*& Date to
CLEAR ws_line.
ws_line-typ = 'S'.
ws_line-key = text-051.
ws_line-info = v_todate.
APPEND ws_line TO lt_top_of_page.
ENDFORM.                    "E04_COMMENT_BUILD
      FORM TOP_OF_PAGE                                              *
FORM top_of_page.
*& To write Heading in Top of page
CALL FUNCTION 'REUSE_ALV_COMMENTARY_WRITE'
    EXPORTING
      it_list_commentary = it_list_top_of_page.
ENDFORM.                    "TOP_OF_PAGE
thanks

Ad Hoc Query & HR Structural Authorisations

Good day,
Can you kindly suggest solutions to the following?
Users with access to IT0008 can view basic pay across company codes. Iam using user groups for restriction per company code and PD Profiles for structural authorisations - there is also a restiction on personnel areas for the company code in the role in which IT8 is allocated...
Can you advise how i can restrict IT8 access for users across sites/company codes?
Thanks have a lovely day!

Hi Anders,
Thank you for the reply,
We are using HR structural authorisations with context solution P_ORGINCON, we have a HR Organisational based structure - where roles and PD profiles are linked to postions (PD Profiles are per company code as well nd linked to IT1017 on object S)... That is correct In our HR enterprise structure the personnel area is a breakdown of the section/s within a company code.
My roles have the personnel area restriction specified however when using Ad hoc query it is still allowing cross company access on it8. is there perhaps an object that is allowing this access we are not using object S_QUERY at this stage. could P_ABAP be allowing this access?

Structural authorisation in HR-PD

Hi there,
Can somebody kindly advise how I can set up the following authorisation in PD.
In the Qualification Catalog OOQA, we are giving a display authorisation to the PD administrators to see the entire structure in the qualification master data catalog. We created a profile for Q and QK, along with evaluation paths Q-Q and QK-QK defined for each of them, and this works fine.
Now the question is that, we would like to retrict the admin's access in PPPM so that,
1) when they assign qualification to Position profile, they can only pick up a certain qualification from the qualification structure. Those that are no supposed to be picked, should be hidden (or the "checkbox" should not be visible)
2) When they assign qualification to Person profile, they are allowed to pick-up nearly all the qualification available in the qualification catalog, except for one specific qualification group.
If I restricted objects Q and QK with some specific object IDs, then the view in OOQA will also be affected.
I currently have two authorisation profiles for Q&QK. One without the Object IDs so that the user gets full display access to the whole structure in OOQA; the other one with Object IDs defined. I also tried it with PLOG_CON and still couldn't get it to work.
Does anyone have any solution for this?
I've been fighting with this issue for weeks now, I will REALLY REALLY appreciate your advise.

Thanks Chandra and Manohar!
I coldn't get PLOG_CON to work. It seems like the system still looks for PLOG during the authorisation check. I tried to activate PLOGI-PDCON via table T77S0 (not sure if this is relevant), but the same error persists.
We are running on ECC 6.0, and the documentation in SAP for PLOG_CON says - "IMPORTANT: Do NOT use this authorization object. It does not work." Any advice, Manohar?
Chandra, could you also explain in detail where/how I can define the function module for my case?
Thanks and appreciate your time!

Concurrent Employment and MSS ( Structural Authorisation)

Hi
We are having some problem with Structural authorisation in case of concurrently employed users. The scenarios is as follows
1. User A is manager and have MSS role and relevant PD profile
2. User P is employee . This employee is concurrently employed. one position of this user is in the organisation unit of manager A and the another position for this
The problem is that the manager A is unable to approve the form submitted by the employee P. if we remove concurrent employment it start working again.
I can see that Manager has structural access over employee P in tcode OOSb
Any suggestion will be welcome
Parveen

Hi
The problem we were having is that index was not updated. So inspite of having access to the user i was not able to approve the form. I have regenerated the index via report rhbaus00 which fixed the problem
Parveen

Structural authorisation along with organisational key

Similar Messages

Maybe you are looking for