Definition

Description
In the SAP standard system, the object HR: Master data
is used for authorization checks of HR infotype data
. You can use a program switch to activateadditional checks which are not included in the standard system. Onecustomer-defined authorization object can also be integrated in thecheck. In this case, you must define the authorization object andgenerate program code (
program MPPAUTZZ). Report RPUACG00 performs thistask.
To set up an additional check with a self-defined object, proceed asfollows:

• Create a new authorization object for HR infotypes. The object name
(e.g. 'Z_ORGIN') must show that it is a customer-specific object.Existing objects may not be changed. Use a field (nnnnn) in the objectif one of the following conditions applies:
the field refers to the employee's organizational assignment (i.e. aP0001-nnnnn field exists - the field P0001-WERKS is a special case. Itcontains the employee's personnel area. The field nnnnn = PERSA is usedfor the authorization check).
the field describes the infotype/subtype (nnnnn = SUBTYor nnnnn = INFTY)
the field is nnnnn = AUTHC (i.e. it is theauthorization level)
the field is nnnnn = TCD (i.e. it is the transactioncode)
Execute function

• Create the authorizations and profiles for the new authorization object

Execute function

• Enter the name of the authorization object, switch off the test mode
and then run report RPUACG00. Enter your user name as the password.

• Activate the check for your object using the program switch
(MPPAUTSW: AUTH_SW).