seema has just posted in the SAP HR Forum forum of Wiki Newforum under the title of Authorization in PD.
This thread is located at http://www.wikinewforum.com/showthread.php?t=15851
Here is the message that has just been posted:
***************
Assuming that you don't use structural authorization (I believe you don't need it), you can manage your security as following:
1. Role A for travel management
we want to give user the access for all employee where travel is concerned
Authorization object P_ORGIN: you assign accessible infortypes, and set * access for personnel areas/subareas/employee groups/subgroups
Authorization object PLOG: you make sure that objects BA, BS _are excluded_ (to make sure that there is no access to apraisals)
2. 1. Role B for PD management
where PD is concerned we just want to restrict user to particular PA
Authorization object P_ORGIN: you assign accessible infortypes, and set _only accessible_ personnel areas/subareas/employee groups/subgroups
Authorization object PLOG: you unclude all objects.
***************
