## 13.3.4.2.6  Security for Additional Applications
## Display of Documents Using Remote Function Call (RFC)
## Posting Data to Accounting
Administrators for Accounting can use the transaction PCP0 ( Display posting runs ) to display posting documents for Human Resources by choosing Goto Document Overview Goto Accounting
Documents . The administrator requires a user for Human Resources that has the corresponding report authorizations for posting data to Accounting (see Authorizations under Payroll ). Y ou can also deactivate this option by removing the corresponding ALE function module.
Conversely, the authorization check for displaying documents from Accounting must be made from the HR system to Accounting.
## External Wage Components
From the External Wage Components infotype (0579), users can display the original document for an external wage component. The document is displayed using the function module HR\_PCIF\_SHOW\_RECEIPT, which calls an RFC-capable function module in the external system. This function module then has to perform its own checks.
The function module BAPI\_WAGE\_COMP\_EXT\_GET\_LIST is used to display a list of data of the External Wage Components infotype (0579). This uses the function module HR\_CHECK\_AUTHORITY\_INFTY for the authorization check.
For the detailed view, the function module BAPI\_WAGECOMPEXT\_GETDETAIL is used. This uses the function module HR\_READ\_INFOTYPE for the authorization check.
For more information, see SAP Note 318789.
## Interface Toolbox and Outsourcing
The interface toolbox (transaction PU12) uses the cluster IF. It uses the following authorization objects:
- P\_PCLX
- P\_PCR
- S\_TMS\_ACT
## · P\_PBSPWE
Outsourcing uses ALE and local files with file access using transaction AL11. This is controlled using user exits in the interface toolbox.
In the standard system, Outsourcing uses the logical system FILEPORT. You can use the transaction WE21 to define customer-specific logical systems.
The XML conversion to IDOC is made using the function module OUT\_IDOC\_XML\_TRANSFORM of the function group HROT and the function group IDOC\_XML1 (RSIDOCWF). The function module GUI\_DOWNLOAD (function group SFES) is also called for the conversion.
## Communication with Authorities
For more information, see B2A: Communication with Authorities .
## Payroll Control Center
For more information, see Payroll Control Center .
## TemSe Files
The country versions for Payroll use reports in which sensitive data is displayed. For example, this data can be from the following sensitive areas:
- Salary
- Tax
- Social insurance
- Pension contributions
- Court orders
This data is saved in temporary sequential (TemSe) files. The TemSe process is used for the following purposes:
- To create and output statutory forms, statistics, and analyses
- To download data for the front end server or application server directly, without storing the data as TemSe objects beforehand. The data can then be transferred from the front end server or application server to a data medium that can be transferred to the authorities.
- For posting data to Accounting
##  Caution
We recommend you no longer use the TemSe process for posting data to Accounting. If you run Accounting and Human Resources in separate systems, we recommend instead that you use Application Link Enabling (ALE). For more information, see SAP Notes 560301, 121614, and 125164.
You can control access to the TemSe objects within the SAP S/4HANA system using the authorization object S\_TMS\_ACT ( TemSe: Actions on TemSe Objects) . Data encryption is not necessary here.
You can find information about the TemSe objects for your country version in the Payroll documentation for your country version.