Skip to Content
Product Information

UI Data Protection – Report Generation and Masking in Quick Viewer (SQVI)

Introduction

Quick Viewer (SQVI) is a Report Generation tool. It has been designed for users with little or no knowledge of ABAP. It generates simple reports as per business need, without the need for any ABAP coding. It is quick and easy to use tool for quick collection of data from S/4HANA system.

Objective

In this blog post, we will learn the process of creating a custom report using Quick Viewer (SQVI) and apply masking in query output.

Creating Custom Report

After logging into SAP System, enter transaction SQVI.

Enter Report Name as “YEMPLIST” in the Quick View field and click on “Create” button

Enter “Title” as “Employee List“, select “Data Source” as “Table join“, Choose mode as “Basis Mode” – To create list directly without design or “Layout Mode” – To design list, and click on “Continue”.

Click on “Insert Table” (Shift+F1)

Enter Table name as PA0000 and click on “Continue

Again click on “Insert Table” (Shift+F1) and enter Table name as “PA0001” which is to be linked to previous table “PA0000“.

SAP automatically proposes joins based on data type of the field. Join condition is represented as horizontal line connecting the fields of the database tables.

Once completed all table linking then click on “Back” button.

Now expand the table which is showing left side.

There are two columns – “List Fields” and “Selection Fields“.

Selection Fields means in selection screen what fields required. These fields will be displayed in input selection screen.

List Fields means output format.

Here, we have selected following fields as “Selection Fields” which will be used as selection parameter –

PA0000-STAT2

PA0000-ENDDA

PA0001-ABKRS

and following fields as “List Fields” which will be displayed as output when the report will be executed –

PA0000-PERNR

PA0001-ENDDA

PA0001-BEGDA

PA0001-WERKS

PA0001-PERSG

PA0001-PERSK

PA0001-BTRTL

PA0001-ABKRS

PA0001-ENAME

If you want a field as Input and Output both, then select both the check-boxes.

Once selection is complete, check the consistency by clicking on “Check” (Ctrl+F6) and save the query.

Click on “Execute” (F8) in order to execute the query.

Provide input parameters in selection and click on “Execute” (F8).

Report Output will be displayed as:

Converting Quick Views to T-Code

Click on menu “System“, click on option “Status” and copy “Program Name“.

Execute transaction “SE93

Enter “Transaction Code” as “YHR_EMPLY” and Click on “Create” button

Enter “Short Text” as “Employee List

Select option “Program and selection screen (report transaction)”

Click on “Continue” button

Paste the copied program name in “Program Name” field and click on “Save” button

Specify the “Package Name” or flag it as a Local Object and click on “Save” button.

Now, we can use T-Code “YHR_EMPLY” for executing this report.

Masking Configuration in SQVI

Now, we will configure masking for Employee Group, Employee Subgroup, Personnel Area, Personnel Subarea, Payroll Area, and Name of Employee fields.

A PFCG Role will be used for the authorization check which will allow users with the specified role to view the field value. If a user does not have this role, it means the user is not authorized and data will be protected either through masking, clearing, or disabling the field.

Prerequisite

Product “UI data protection masking for SAP S/4HANA” is used in this scenario to protect sensitive data at field level and must be installed in the S/4HANA system.

The product is a cross-application product which can be used to mask/protect any field in SAP GUISAPUI5/SAP FioriCRM Web Client UI, and Web Dynpro ABAP.

Configuration to achieve masking

Logical Attribute is a functional modelling of how any attribute such as Social Security NumberBank Account NumberAmountsPricing informationQuantity etc. should behave with masking.

Configure Logical Attribute

Follow the given path:

SPRO -> SAP NetWeaver -> UI Data Protection Masking for SAP S/4HANA -> Maintain Metadata Configuration -> Maintain Logical Attributes

Masking in SQVI Query

Maintain Technical Address

In this step, we will associate the Technical Address of the fields to be masked with the Logical Attributes.

Follow the given path:

SPRO -> SAP NetWeaver -> UI Data Protection Masking for SAP S/4HANA -> Maintain Metadata Configuration -> Maintain Technical Address

Follow below mentioned steps:

Under “GUI Table Field Mapping”, maintain technical address for following fields.

Maintain Field Level Security and Masking Configuration

Here, we will define how masking will behave with the logical attribute that we created in above step.

Follow the given path:

SPRO -> SAP NetWeaver -> UI Data Protection Masking for SAP S/4HANA -> Data Protection Configuration -> Maintain Field Level Security and Masking Configuration

Follow below mentioned steps:
  • Click on “New Entries” button
  • Enter “Sensitive Entity” as “LA_SQVI_MASK” and press “Enter” key. “Description” and “Application Module” will get populated in corresponding fields
  • Check “Enable Configuration” check-box
  • Select “Role Based Authorization” option
  • Enter “PFCG Role” as “/UISM/PFCG_ROLE“. In this example, we have used a blank role “/UISM/PFCG_ROLE”. Customers can use any role as per their requirement.
  • Enter “Field Level Action” as “MASK_SIX
  • Click on “Save” button

Result

Conclusion

In this blog post, we have learnt the process of creating a custom report using Quick Viewer (SQVI) and apply masking in query output.

Be the first to leave a comment
You must be Logged on to comment or reply to a post.