Security Considerations for Using the InfoSet (Ad Hoc) Query Tool

The information in the following sections is designed for trained SAP security/administration professionals. To call the InfoSet (Ad Hoc) Query tool, your SAP R/3 system provides you with four reports and function modules (of the same name), which implement the InfoSet (Ad Hoc) Query tool call and determine access rights and reporting type for the InfoSet (Ad Hoc) Query tool. The following sections describe the reports/function modules that are available.

The SAP_QUERY_DEVELOPMENT_ROLE Module

You use the SAP_QUERY_DEVELOPMENT_ROLE module for access using role development.

The following are the parameters for this module:

• Role (input necessary)

• InfoSet (optional)

• Query (optional)

A query group from the global area has to be assigned to the role. If you specify an InfoSet, it has to be assigned to the query group. If you specify a query, it has to be assigned to the query group.

The SAP_QUERY_AD_HOC_ROLE Module

You use the SAP_QUERY_AD_HOC_ROLE module for access using role and ad hoc reporting.

The following are the parameters for this module:

• Role (input necessary)

• InfoSet (optional)

• Query (optional)

A query group from either the global or standard area has to be assigned to the role. If you specify an InfoSet, it has to be assigned to the query group. If you specify a query, it has to be assigned to the query group.

The SAP_QUERY_DEVELOPMENT Module

You use the SAP_QUERY_DEVELOPMENT module for access using query group and development.

The following are the parameters for this module:

• Query group (optional)

• InfoSet (optional)

• Query (optional)

The query group has to come from the global application area. If you specify more than one parameter, the parameters must match, meaning that the InfoSet has to be assigned to the query group, and the query must be based on the specified InfoSet.

The SAP_QUERY_AD_HOC Module

You use the SAP_QUERY_AD_HOC module to access using query group and ad hoc reporting.

The following are the parameters for this module:

• Query area (standard setting: Standard area)

• Query group (optional)

• InfoSet (optional)

• Query (optional)

First, you need to decide which query area (standard or global) you want to work in with the InfoSet (Ad Hoc) Query tool. (The standard area is recommended.) To work in the global area, you select the global area indicator. Then you enter the remaining parameters. It is important to note that if you specify more than one parameter, the parameters must match: The InfoSet has to be assigned to the query group, and the query must be based on the specified InfoSet.

The InfoSet (Ad Hoc) Query tool has default values in the specified query area and query group parameters, and only ad hocstyle reporting can take place. In other words, a user who accesses the InfoSet (Ad Hoc) Query tool from the HCM module or menu path either goes straight to the initial screen of the InfoSet (Ad Hoc) Query tool, where the assigned InfoSet is displayed, or can choose between several assigned InfoSets (as described in the step-by-step instructions earlier in this chapter, in the section "Creating a Basic Query with the InfoSet (Ad Hoc) Query Tool"). In this type of call in the HCM module, the InfoSet Query tool is referred to as the Ad Hoc Query tool.