InfoType Read Authorization Error.

[Former Member]

Hello All,

We have users who are assigned to Role which has IT 0041 for Date Specification with M, R authorizations, The IT 0041 is assigned to P_Orgincon and P_pernr through Tcode PA20.

But the users are getting "No Read authorization to Date Specifications" error to this IT 0041.

Please suggest.

Thanks,

CB

[Former Member]

Hi,

This could also be due to the authorisation for employee group,subgroup or personnel area. Please check the su53 screenshot for a more detailed analysis.

Regards,

Venkatesh.K

[Former Member]

Hello Venkatesh,

Employee Group and Subgroup has *.

Please suggest.

Thanks,

CB

[Former Member]

okay. then put an ST01 trace and see what happens.. I sometimes saw that the output screen also has other boxes which need authorisation. Can you see the result screen if this is also trying to get values for something else apart from P_origin.

Please also paste su53 message here.

[Former Member]

Hello Chandresh,

Since you have mentioned the authorization to IT0041 is being provided via object P_ORGINCON, this means Context based structural authorization is implemented in your system.

In that case, please check the structural profiles assigned to the user (field PROFL iin object P_ORGINCON) via tcode OOSP,

The authorization profile must be looking of a specific organizational unit/Entry point (either statically where object ID is mentioned in the profile or dynamically where object ID is fetched via a Function module and can be seen in tcode OOSP) in the user's authorization which can be assigned via PP01/Po13 for resolving the access issue. Don't forget to run programs RHBAUS02 and RHBAUS01 after assignment of the required org unit/entry point to user to refresh the structural INDX.

Hope this help!

Sandipan

[Former Member]

Hi Sandipan,

i agreed with you, and i have seen that Structural Auth is assigned to it and we cant remove that profile,

However, in ST01 it as asking for IT0006 along with many more ITwith * in Auth Profl and we can not do this.

Please help.

Thanks,

CB

[Former Member]

Did you check in Tcode OOSP, if the Auth profile (mentioned in PROFL field of object P_ORGINCON in the User's role) has Object type as "O" and Object ID set to any specific value or just blank?

If Object ID is blank, that means the Structural profile is Dynamic and uses a Function Module (check for Field: Function module in auth profile) to get the Org units (O) for which user should have access to. In that case that particular org unit (O) has to be assigned to user's ID (US) or Postion (S) via PP01/PP02 tcode.

After the assignment, run programs RSBAUS02 and RSBAUS00 to regenerate the Structural INDX.

Also, let me know the Evaluation Path maintained on the Auth profile of the user.

Cheers!

Sandipan

[Former Member]

Hello Sandipan,

I have checked that Obj type 'O' is not assigned however 9A, 9B etc many more are assigned, Obj ID is blank and Evaluation path is also blank..

Thanks,

CB

[Former Member]

How about the functional module field in the auth profile? Whats maintained there?

Also check if the personnel area, of the personnel number, users are trying to access is maintained in the PERSA field of object P_ORGINCON and is there any restrictions on organizational key field in P_ORGINCON

Last thing I would ask is which period are users trying to view IT 0041 for, in PA20? Is it past, current or future data user is trying to display for the infotype? Sometime the auth profiles are restricted to view only present and future data but not past data.

Sandipan

[Former Member]

Hello Sandipan,

The issue is resolved after running the Report.

Thanks,

Chandresh Bajpai

Edited by: chandresh bajpai on Dec 9, 2010 8:22 PM

[Former Member]

Cheers:) It is recommended to run RHBAUS02 and RHBAUS00 as daily jobs for regeneration of the structural profiles buffering in INDX table and keeping T77UU consistent.

Thanks for your confirmation:)

Sandipan