cancel
Showing results for 
Search instead for 
Did you mean: 

Authorization inside Payroll Driver

Former Member
0 Kudos

Hello experts,..

Here we have payroll for seven companies runs under one payroll area Z1,

we have a scenario where one user ABC of company XYZ will be running his company payroll without creating new payroll Area

so user ABC should only be allowed to run payroll for XYZ only,

And we want to keep only one Payroll Area

We have used P_Origin, and User ABC is not able to see any other companies employee in PA20

but when he wants to run payroll, payroll driver is not considering P_Origin, so he is able to run payroll for every one.

how can we apply P_Origin authorization check for Payroll driver also?

he should be able to run payroll for only those employees which he can see in PA20 (filtered by P_Origin)

Accepted Solutions (1)

Accepted Solutions (1)

Former Member

The payroll driver DOES consider P_ORGIN in the same way other HR reports do.

However, in half the organisations I've seen, someone was using authorisation object P_ABAP without knowing what it does.

If these users have P_ABAP with the name of the payroll program or with the logical database PNP, then this is probably the problem.

In most cases P_ABAP is not necessary at all.

Former Member
0 Kudos

thanks sven, will check and update accordingly

Former Member
0 Kudos

Dear Seven,

Yes, I tested it now, Payroll driver does check P_ORGIN

only culprit was P_ABAP

I removed P_ABAP from every role, now the payroll driver can filter employees correctly

Former Member
0 Kudos

Excellent. Thanks for the update.

Answers (1)

Answers (1)

jagan_gunja
Active Contributor
0 Kudos

Check with your security profile consultant, if the profile for such users can include the payroll transaction code with specific values for company code (comp code should be in the transaction's selection input).