Authorizations for Human Resources
General Authorization Check
Setting Up General Authorization Checks
Structural Authorization Check
Structural Profiles
Definition of Structural Authorizations
Assignment of Structural Authorizations
Technical Aspects
Authorization Objects
P_CH_PK (HR-CH: Pension Fund: Account Access)
P_DE_BW (HR-DE: Statements SAPScript)
P_DK_PBS (HR-DK: Authorization Check for Access to PBS Company)
P_PYEVDOC (HR: Posting Document)
P_OCWBENCH (HR: Activities in the Off-Cycle Workbench)
P_BEN (HR: Benefit Area)
P_CATSXT (HR: Time Sheet for Service Providers Type/Level Check)
P_PE02 (HR: Authorization for Personnel Calculation Rule)
P_PE01 (HR: Authorization for Personnel Calculation Schemas)
P_HRF_INFO (HR: Authorization Check InfoData Maintenance for HR
P_HRF_META (HR: Authorization Check Master Data Maintenance for
P_CERTIF (HR: Statements)
P_APPL (HR: Applicants)
P_PYEVRUN (HR: Posting Run)
P_PCLX (HR: Clusters)
P_DBAU_SKV (HR: DBAU: Construction Pay Germany Social Fund Pro
P_PCR (HR: Payroll Control Record)
P_ABAP (HR: Reporting)
P_ORGIN (HR: Master Data)
Example of Period Determination Using P_ORGIN
P_ORGINCON (HR: Master Data with Context)
P_PERNR (HR: Master Data Personnel Number Check)
P_ORGXX (HR: Master Data Extended Check)
P_ORGXXCON (HR: Extended Check with Context)
P_TCODE (HR: Transaction Code)
P_USTR (HR: US Tax Reporter)
PLOG (Personnel Planning)
P_HAP_DOC (Appraisal Systems: Appraisal)
S_MWB_FCOD (BC-BMT-OM: Allowed Function Codes for Managers Desk
P_NNNNN (HR: Master Data: Customer-Specific Authorization Object
Creating a Customer-Specific Authorization Object
P_NNNNNCON (HR Master Data: Customer-Specific Authorization Obje
Cross-Application Authorization Objects
S_TABU_DIS (Table Maintenance (Using Standard Tools Such as SM30
S_TABU_CLI (Table Maintenance of Cross-Client Tables)
S_TABU_LIN (Authorization for Organizational Unit)
S_TMS_ACT (TemSe: Actions on TemSe Objects)
HR: Authorization Main Switches
AUTSW ORGIN (HR: Master Data)
AUTSW ORGXX (HR: Master Data Extended Check)
AUTSW NNNNN (HR: Customer-Specific Authorization Check)
AUTSW ADAYS (Tolerance Time for Authorization Check)
AUTSW PERNR (HR: Master Data Personnel Number Check)
AUTSW APPRO (HR: Test Procedures)
AUTSW ORGPD (HR: Structural Authorization Check)
AUTSW INCON (HR Master Data (Context))
AUTSW XXCON (HR Master Data: Extended Check (Context))
AUTSW NNCON (Customer Authorization Object (Context))
AUTSW DFCON (Authorization Check for a Person with Default Posit
AUTHC (Authorization Level)
VDSK1 (Organizational Key)
Time Logic
Periods of Responsibility
Control Mechanisms (Double Verification Principle, Test Procedur
Asymmetrical Double Verification Principle
Symmetrical Double Verification Principle
Test Procedures
Creation of Infotype Log
Processes and Flowcharts of the Authorization Check
Process of the General Authorization Check
Flowchart of the General Authorization Check
Process of the Authorization Check by Personnel Number
Flowchart of the Authorization Check by Personnel Number
Process of Determining the Periods of Responsibility
Process of Determining the Period of Responsibility According to
Flowchart of Determining the Period of Responsibility According
Process of Determining the Period of Responsibility According to
Process of Determining the Period of Responsibility According to
Flowchart of Determining the Period of Responsibility According
Process of the Authorization Check Using P_ORGIN, P_ORGXX and P_
Flowchart of the Authorization Check Using P_ORGIN, P_ORGXX and
Process of Time Logic
Flowchart of the Time Logic
Process of the Test Procedures
Flowchart of the Test Procedures
Process of Determining the Date After Which Changes Are Permitte
Flowchart of Determining the Date After Which Changes Are Permit
Interaction of General and Structural Authorizations
Examples
Example: Employee Self-Service
Example: Administrator Should Not Be Allowed to Edit Own Data
Example: Administrator Should Not Be Allowed to Enter Data Alone
Example: Decentralized Time Recording
Example: Telephone List
Example: Payroll
Example: Transaction-Dependent Authorizations
Example: Structural Authorization Profiles
Customer Enhancements
HRPAD00AUTH_CHECK (BAdI: Customer-Specific Authorization Checks)
Examples of the HRPAD00AUTH_CHECK BAdI
Example of the Implementation of HRPAD00AUTH_CHECK
HRBAS00_STRUAUTH (BAdI: Structural Authorization)
HRBAS00_GET_PROFL (BAdI: Determine Assigned Structural Profiles)
Troubleshooting Authorization Problems
Constraints
Special Features of the Authorization Check in Dialog (Master Da
Special Features of the Authorization Check in Reporting (Master
Performance Aspects
Redundant Read of Objects
Evaluation Paths with Non-Specified Target Object Types
Context Problems in HR Authorizations
Context Solution
Authorization Objects for the Context Solution
P_ORGINCON (HR: Master Data with Context)
P_ORGXXCON (HR: Extended Check with Context)
P_NNNNNCON (HR Master Data: Customer-Specific Authorization Obje
Creating a Customer-Specific Authorization Object
Authorization Main Switches for the Context Solution
AUTSW INCON (HR Master Data (Context))
AUTSW XXCON (HR Master Data: Extended Check (Context))
AUTSW NNCON (Customer Authorization Object (Context))
AUTSW DFCON (Authorization Check for a Person with Default Posit
Example Implementation of the Authorization Main Switches
Additional Functions for Authorization Checks
RHPROFL0 Report
RHBAUS00 Report (Regeneration INDX for Structural Authorization)
RHBAUS01 report (Output of Views on Objects in the Structural Au
RHBAUS02 Report (Check and Compare T77UU (User Data in SAP Memor
RPUACG00 Report (Code Generation: HR Infotype Authorization Chec
Report RHUSERRELATIONS (Display User Assignments)