Authorization issue (structual auth ?)

[#1]

Experts,

One of my employee (say A) is having problem in accessing PC00_M25_CANN and he gets the following error

          Personnel numbers skipped by the database driver
          Reason 1: insufficient authorization, no. skipped personnel nos.: 1

Wheras the other employee (Say B) is able to run wihtout issues. Both the emp's have same roles/profiles & both belongs to the same Org unit.

Both the employee id's are found in OOSB and I rerun the structural auth indexing program RHBAUS00, but still the probelm persists for emp A.

Pl advice.

Thanks!

DJ

[Former Member · Accepted solution]

As both users seem to have the same rights and it's just one pernr skipped, a quicj guess would be: it's skipping the pernr assigned to the user (IT0105, subty 0001), because auth object p_pernr is blocking it. Maybe the second user doesn't have an assignment in IT0105.

But transaction SU53 or a trace via ST01 should give you more information to approach the problem, if this quicj guess is not the solution.

[Former Member · Accepted solution]

Hi ,

Can you please try to clear or reset user buffer in SU56.

Thanks

Rishi Abrol

[Former Member · Accepted solution]

Sven,

I have replicated the case in QA and i have played around T77UU INDX (delete/recreate) - No luck! - still the problem persists.

I have turned ST01 trace analysis

But when i checkd the emp is having authorization to access IT0000

Your help is much appreciated.

Thanks!

[JonathanM · Accepted solution]

Hi,

This is logic. You don't have a level "*" for the P_PERNR object.

Can you send us the ST01 full log instead?

Best regards,

Jonathan

[Former Member]

@ Sven,

IT0105 assignments are correct, and i got SU53 trace from the user and could not predict anything..

@ Jonathan,

I have checked HRAUTH and both the employee have  similar entries in all the tabs. I tried regenerating the indexes, but still the problem persists.

& did user-match and hv no differences.

What is the impact of cleaning up T77UU (to avoid structural auth ?)

Thanks!

[Former Member]

Hi,

Try it clear INDX table for this employee and refill the entry by program RHBAUS02 Report .

Thanks

Rishi Abrol

[Former Member]

Tried and no use, switch ST01 trace on and it says no authorization to It0000 .. weird .. the empl has auth to read IT0000. Thanks!

[JonathanM]

Hi,

You can also check the user specific authorization details via transaction HRAUTH.

There you'll find in the INDX tab the list of authorized object including pernrs...

Then in the "HR Auhtorization object", you'll see how the P_PERNR object is activated and how it prevent the employee to modify his own pernr.

Best regards,

Jonathan