topic Re: structural authorizations not working in Application Development and Automation Discussions

structural authorizations not working

Former Member — Sun, 21 Feb 2010 00:19:21 GMT

Hi,

We have new HCM system ECC 6.0 EP4 ,we enabled Contextual authorizations swithch and ORGPD switch , i created simple PD profile with one orgunit (500001) updated this in test role of P_ORGINCON object and assign to Test user (Test user already part of org stru assined to valid Personal no)

When test user trying to access Personal no's under 500001 org unit getting no autharization error.

Did i miss any thing ? i am not able to find any wrong in this process Org unit and positions and persons belongs or unit are valid.

Thanks

Re: structural authorizations not working

Former Member — Sun, 21 Feb 2010 06:23:00 GMT

Hi ,

Looks like problem with Contextual Autharization , i disables AUTSW INCON (P_ORGINCON)switch and enabled AUTSW ORGIN (P_ORGIN) switch also assigned PD profile to user manuvally through OOSB , this time Structral autharizations are working perfect .

Did i missing any other settings for contextual autharizations ?

Thanks

Re: structural authorizations not working

Former Member — Sun, 21 Feb 2010 15:07:20 GMT

In Contextual Authorizations system not

validating P_ORGINCON of PROFIL field it is looking T77UA table

entry ,if i create entry manually through OOSB Structural

authorizations are working , i understand that contextual are

alternative to T77UA not an addition ?

Is it by nature or do we have to do any think to read from autharization object?

Thanks

Bob

Re: structural authorizations not working

Former Member — Sun, 21 Feb 2010 21:59:56 GMT

It looks okay to me.

P_ORGINCON-PROFL looks in OOSB to see which PD profile the user has. If they don't have any, then the profile of user SAP* applies.

If you want it to look elsewhere, then the view has 2 BADI (Business Add-In's) available:

HRBAS00_GET_PROFL

and

HRBAS00_STRU_AUTH

P_ORGXXCON can be used as an alternative to P_ORGINCON. Perhaps that is what you meant? Please see the documentation in transaction SU21.

Cheers,

Julius

Re: structural authorizations not working

Former Member — Tue, 23 Feb 2010 03:59:14 GMT

Thanks for reply ,

If we enable one of these BADI in the system we no need to maintain T77UA entry manually right ,if we don't maintain this table how we extract PD profile assignments data to BI system ? Since T77UA is empty and what is the SAP recommended method.

Thanks

Bob