Implement Field-Level Security in HR Infotype Screens

  • by Graham Wong, Co-Founder, HR Focal Point
  • March 15, 2004
Because SAP's HR module is fully integrated with other SAP modules, they share data. Therefore, it is important to ensure that sensitive HR data is invisible to unauthorized users. The author explains how to create and configure several infotype screens to block data to some users and allow access to others. The article uses Release 4.6C examples, but the same steps apply to older releases.

One of the strengths of the HR module is its complete integration with data that is generated by other SAP modules. For better or worse, what this usually means is that non-HR users share the same physical database with HR users. For this reason, R/3 provides a full set of HR authorization objects and HR-specific security frameworks to ensure that sensitive HR data is invisible to those who are not authorized to see it.

One of the first questions typically posed during a project when SAP HR security comes into focus is, “Does SAP support field-level security for HR information?” The answer is both yes and no. Straight out of the box, SAP may not support “field-level security” to the degree that most users expect. However, I’m going to show you how to control exactly which fields an SAP user actually sees or has access to in HR infotype screens.

This article demonstrates how to use standard SAP infotype screen control configuration coupled with custom ABAP code to strictly and precisely control what fields appear on HR infotype screens for each user. All the examples and code snippets are from an SAP HR 4.6C system, but should function in older releases with minimal or no changes.

Graham Wong

Graham Wong is a consultant and co-founder HR Focal Point, an SAP and technology consulting company. He has been working with SAP applications and technology since 1994. He holds bachelors degrees in commerce and French from the University of Virginia as well as a master's degree in management information systems from the McIntire School of Commerce at the University of Virginia.

See more by this author


Comments

No comments have been submitted on this article. 


Please log in to post a comment.

To learn more about subscription access to premium content, click here.