Sap hr authorizations checking for blank ' ' subtype in p_oigincon

[Former Member]

Hi we are implementing sap hr and we are getting missing authorization errors and trace/SU53 points to blank '  '  in subtype field for p_orgincon. Do we need to implement any SNOTE/ patch to cover this

When we add the blank subtype in the authorizations it works fine but wanted to know if there is a way of fixing this.

Pls help if any one faced this before

[jurjen_heeck]

Hi,

If you search the forums for 'DUMMY' checks/values you will find more examples. The ' ' value doesn't bring along additional rights so you can add it to your roles without problems. Sometimes authority checks only verify if the object is in the user buffer without caring about al the fields' contents and in other cases checks can be so restrictive they want to check on blank fields.

You will see this more often and not only in HR.

Jurjen

[Former Member]

Jurjen Heeck wrote:
You will see this more often and not only in HR.

Unfortunately it is getting worse in some areas as well. After cleaning up all the hard-coded spaces and ID <field_name> FIELD DUMMY types, a proliferation of central function modules and methods arived, which is principally a good thing.

Only problem is that the fields of the authorization object(s) need to be import parameters for the functions and are all to often typed with DEFAULT SPACE. This means that if the caller does not pass a value and the developer of the FM did not think of coding a DUMMY check in cases where field is initial... then you get hard-coded spaces coming back again...

Cheers,

Julius