Restrict all HCM related tables

[Former Member]

Hi all,

If tomorrow HCM is installed in the same system that another SAP module, and if current users of the other SAP module have access to SE16, is it possible to restrict all HCM data to these users. My client thinks that people who access SE16 could always find a way to access HCM data such as basic pay, appraisals, ... I know a little about S_TABU_DIS object but I'm not sure it will works for all data.

I know that the better way is to install HCM on another server or another logical instance but if it's not the case, is there a really secured way to restrict the access to the HR data ?

Thanks

[Former Member]

Dear Ben,

For my client, we retricted access to all Personnel tables as follows:

Authorization object : S_TABU_DIS

Table authorization group :

(From) &NC& (To) OS

(From) PASA (To) XXXX

This is how excluded the ranges where personnel administration tables reside.

&NC& is the first table name when alphabetically sorted and XXXX is the last.

We also made some restriction on S_DEVELOP authorization object in the same manner.

Regards,

Dilek

[Former Member]

Yes,

You are right BEN, you can very well controll that with authrization profile "S_TABU_DIS" and "S_TABU_LIN" etc.

Please refer the following link

[http://help.sap.com/saphelp_nw04s/helpdata/en/1e/e867408cd59b0ae10000000a155106/content.htm]

[http://help.sap.com/saphelp_nw04s/helpdata/en/1e/e867408cd59b0ae10000000a155106/frameset.htm]

P_ABAP autharization object will be reviewd.

[Former Member]

Hi

Check the below link.

[;

~~~Ganesh Kumar K.

[antoine_foucault]

nope. not possible to restrict table access via SE16. Your client is not the only one to think like this. Good luck.

Cheers.