Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Is there a way to retrict access to SSN & DOB fields in IT002;IT00​21;IT0704 for specific users from SAP Security Stand point

Former Member

‎02-20-2014 8:47 AM

0 Kudos

We have a requirement we have been asked to limit the access to SSN & DOB fileds in SAP.

we came to know that IT002,IT0021 & IT0704 will have the SSN & DOB details.

Can we restrict access to these fileds (SSN & DOB ) for specific set of users even they have access to these inoftypes(0002,0021,0704) from security perspective?If not wat all the alternatives we have from Dev & Fucntional standpoint

Your response in this regards is greatly appreciated

1 REPLY 1

shivraj_singh2
Active Participant

‎02-20-2014 10:16 PM

0 Kudos

Vamshi,

Restricting a specific field in an Infotype to be viewable only for one set of user while not viewable by another set of users is possible. However, it is not done through security settings, specially for Infotypes where sub-types are not available. You can explore extending Infotypes e.g. 0002 to include subtypes to gain more control but such enhancements need to properly evaluated.

One non-security related resolution for your scenario is to explore editing the table T588M in SM30. Here you can edit fields and use MOLGA+PSA combinations to restricting your user populations to separate PSAs and there by separate field view capabilities.

Regards,

Shivraj Singh