on 04-16-2015 1:39 PM
Hello experts,..
Here we have payroll for seven companies runs under one payroll area Z1,
we have a scenario where one user ABC of company XYZ will be running his company payroll without creating new payroll Area
so user ABC should only be allowed to run payroll for XYZ only,
And we want to keep only one Payroll Area
We have used P_Origin, and User ABC is not able to see any other companies employee in PA20
but when he wants to run payroll, payroll driver is not considering P_Origin, so he is able to run payroll for every one.
how can we apply P_Origin authorization check for Payroll driver also?
he should be able to run payroll for only those employees which he can see in PA20 (filtered by P_Origin)
The payroll driver DOES consider P_ORGIN in the same way other HR reports do.
However, in half the organisations I've seen, someone was using authorisation object P_ABAP without knowing what it does.
If these users have P_ABAP with the name of the payroll program or with the logical database PNP, then this is probably the problem.
In most cases P_ABAP is not necessary at all.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Check with your security profile consultant, if the profile for such users can include the payroll transaction code with specific values for company code (comp code should be in the transaction's selection input).
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
91 | |
8 | |
7 | |
4 | |
4 | |
3 | |
3 | |
3 | |
3 | |
3 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.