Role Authorisation create infotype in background, then allowed no access

[bholas]

Questions

We are using ECC6 and are wishing to design a HR role that would allow the creation of an infotype in the background, when the hiring action is done, but then not allow the role to be able to access this infotype ie to view, create, change once it has been created.

We are using authorisation object P_ORGIN and have set the following:

Authorisation level = W
Infotype = 9026

By having the above setting the infotype is created in the background but the role also allows the user to go into PA30 and use the change functionality to access this infotype.

Is there an authorisation setting that will allow the creation of the infotype in the background and then not allow view, display, create or change on the infotype?


Answers

No there is no such authorization.
However, there can be solution for your requirement: if you create routine (i.e. batch input) that will create IT in background, with help of object P_ABAP you can remove all security checks for that routine. Thus user will be able to start and execute routine (even via dynamic action) that creates infotype, but will have no access to it.

Similar Threads:

• Error when create Infotype 0007-Planned Working Time of Personnel data
• Create PA-Infotype 0027 after create Infotype 1018 with Badi HRBAS00INFTY
• Create New Field in infotype 0001
• .Net Role Based & Code Access Security - Interview Questions
• How to create a HR infotype?