SAP Security Online!
 
Web SAPSecurityOnline.com
 
   
 
 
 

 
 
Example of Period Determination Using P_ORGIN

Authorization check using P_ORGIN for:
INFTY = 0014
SUBTY = M120
AUTHC = R
The data available in the Organizational Data infotype (0001):

01.01.2000 – 12.31.2000:

01.01.2001 – 12.31.2001:

01.01.2002 – 12.31.9999:

PERSA = DE01

PERSA = US01

PERSA = DE01

PERSG = 1

PERSG = 1

PERSG = 1

PERSK = DA

PERSK = DA

PERSK = DB

VDSK1 = 42

VDSK1 = 42

VDSK1 = 42

The user’s authorizations available in the user master record:

INFTY = 0014
SUBTY = M120
AUTHC = R
PERSA = DE01
PERSG = 1
PERSK = *
VDSK1 = *

INFTY = 0015
SUBTY = *
AUTHC = *
PERSA = *
PERSG = *
PERSK = *
VDSK1 = *

The following authorization checks are performed by the system:
For the period January 1, 2000 – December 31, 2000:

INFTY = 0014
SUBTY = M120
AUTHC = R
PERSA = DE01
PERSG = 1
PERSK = DA
VDSK1 = 42


Due to the first authorization in the user master record, the authorization check is successful. The period belongs to the period of responsibility. For the period January 1, 2001 – December 31, 2001:

INFTY = 0014
SUBTY = M120
AUTHC = R
PERSA = US01
PERSG = 1
PERSK = DA
VDSK1 = 42

The first authorization in the user master record denies access to PERSA = US01, the second denies access to INFTY = 0014. The authorization check is unsuccessful and the period does not belong to the period of responsibility.
For the period January 1, 2002 – December 31, 9999:

INFTY = 0014
SUBTY = M120
AUTHC = R
PERSA = DE01
PERSG = 1
PERSK = DB
VDSK1 = 42


Due to the first authorization in the user master record, the authorization check is successful. The period belongs to the period of responsibility.


Result
In this example, the period of responsibility consists of the periods January 1, 2000December 31, 2000 and January 1, 2002December 31, 9999.




 
Copyright © 2005 - 2007 SAP Security Online.com All Rights Reserved.