Authorizations 

The Cross-Application Time Sheet uses the authorization provided by the SAP Web Application Server. The security recommendations and guidelines for authorizations as set out in the SAP Web AS ABAP security guide therefore also apply to the Cross-Application Time Sheet.

The SAP Web Application Server authorization concept is based on assigning authorizations to users based on roles. To maintain roles on the SAP Web AS ABAP, use the profile generator (transaction PFCG).

Standard Roles

The following table shows examples of standard roles that are used by the Cross-Application Time Sheet.

Standard Roles

Role	Description
SAP_EMPLOYEE	Employee Self-Service
SAP_HR_PT_TIME-ADMINISTRATOR	Time Administrator
SAP_ISR_RETAIL_STORE	SAP Retail Store User
SAP_PS_CONFIRM	Confirmations
SAP_HR_PT_TIME-SUPERVISOR	Time Supervisor
SAP_ISR_STORE_PERSONNEL	Store Personnel Manager
SAP_HR_PT_TIME-MGMT-SPECIALIST	Time Management Specialist

Standard Authorization Objects

In the Cross-Application Time Sheet environment, you require only the general authorizations for the relevant target applications. When assigning authorizations, base them on the authorizations for the CAT* transactions.

See also:

Note the special points listed in the following section of the SAP Library: Cross-Application Components ® Cross-Application Time Sheet  ® Assigning Authorizations.