09-03-2007 3:28 AM
Hi,
I have a situation where a program called by our ESS system requires write access to infotype 2006 to succesfuly project leave for an employee. So, I assigned the role with P_ORGIN W and 2006. This is a standard program (used by PT50).
My issue is that those users with PA30 access can now update their own and others infotype 2006.
So... To ensure that the user could only write to their own infotype 2006 record and not others, I thought I would use P_PERNR (with W, I and ST *).
This has not restricted write access to the persons own 2006 infotype and they can continue to write to other employees 2006 infotype.
If I change P_ORGIN from write access to read, then the restriction works, but the program (outlined earlier) stops working.
P_PERNR is active in the system.
Any Ideas?
09-10-2007 1:45 AM