Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Question on PO10 authorization

Sajid
Participant

‎01-04-2013 1:39 PM

0 Kudos

I want to be able to restrict users to change an org unit in PO10 based on personal area in Info type 1008. For example user1 can only change an org unit with personal area PA01 and user2 should only change org unit with PA02. How can I do this? I tried using the object P_ORIGIN, but this object is not checked when editing fields of info type 1008.

Thanks

Zak

2 REPLIES 2

RUDAVATH
Explorer

‎01-16-2013 8:05 PM

0 Kudos

Hi Zakaria,

in SAP HR Infotypes are categorised as below.

Infotype Number RangeArea
0000-0999Personnel Administration
1000-1999PD Objects(Organizational Management
2000-2999Time Management
4000-4999Recruitment
9000-9999Z or Custom Development

Where as your trying to restrict a Organizational Management infotype 1008 with P_ORGIN object is is not correct in this scenario.

What you can do is, restrict 1008 IT with PLOG object, and Personnel Areas with P_ORGIN.

Like User 1 P_ORGIN(PA01) and PLOG 1008

       User 2 P_ORGIN(PA02) and PLOG 1008

Sajid
Participant
In response to RUDAVATH

‎01-16-2013 8:48 PM

0 Kudos

We have setup like you mentioned except that we want to restrict all infotypes besed on PA:

my setup:

User 1 P_ORGIN(PA01) and PLOG *

User 2 P_ORGIN(PA02) and PLOG *

but, User 1 can change org unit of PA02

and User 2 can change org unit of PA01

It is still not restricting based on personal area. Do we need to implement PD profile or can it done using regular roles? Thanks.