How to create a role to give access to Adhoc quary only for a particular countrie's data?

[Former Member]

Hi Gurus,

I have created a role with PA20(only for US) access and Adhoc query.

I am successful in restricting PA20 only for US but when the user executes adhoc query, she is able to view all the data for all countries.

I want her to access only US data through adhoc query. Could you please help me solve this?

Thanks,

Jeevan Das

[former_member74904 · Accepted solution]

Hi Jeevan,

What logical database are you using for the ad-hoc query? (PNP / PNPCE?)

Also, please check if the user has object P_ABAP with value SAPDBPNP for field REPID assigned.

This will grant complete authorization for any report (based on the PNP database of course).

Good luck!

Dimitri.

[jagan_gunja]

In the security profile, you should be able to restrict at transaction->field content level.

Discuss with your Security expert.

[Former Member]

Jeevan has that bit right - otherwise it wouldn't work in PA20.

As suggested above, chances are there is an inappropriate usage of P_ABAP, which leaves the barn doors wide open