## 13.3.4.2.7.27  Country/Region-Specific Features: Slovenia
Overview of security-relevant information for payroll and personnel administration for the local version for Slovenia.
## Authorizations
The local version for Slovenia uses the standard authorization concept used by SAP S/4HANA. Therefore, the recommendations and guidelines for authorizations as described for SAP S/4HANA also apply to the local version for Slovenia.
## Standard Authorization Objects
The local version for Slovenia uses the security-relevant authorization objects that are available for Personnel Management and Payroll.
The following table shows the security-relevant authorization objects that are also used in the local version for Slovenia.
Country/Region-Specific Authorization Objects
| Authorization Object   | Field   | Value   | Description                             |
|------------------------|---------|---------|-----------------------------------------|
| P_SI_PDPZ              |         |         | HR-SI: Authorization for PDPZ reporting |
| Authorization Object   | Field     | Value   | Description                                                                  |
|------------------------|-----------|---------|------------------------------------------------------------------------------|
|                        | P62_ACTVT | M.D.B.  | Activity for authorization check M-Data mining, D- Display data, B- B2A file |
|                        | P62_TAXNO |         | Tax number                                                                   |
| P_SI_RTEEX             |           |         | Slovenia: Export Runtime En- vironment                                       |
|                        | REPID     |         | ABAP ProgramName                                                             |
## Communication Channel Security
The following table shows the communication paths that the local version for Slovenia uses, the protocol used for the connection, and the type of data transferred.
| Communication Paths   | Protocol Used                                                                                                                   | Type of Data Transferred   | Data Requiring Particular Protection   |
|-----------------------|---------------------------------------------------------------------------------------------------------------------------------|----------------------------|----------------------------------------|
| eNDM                  | Internal communication be- tween HRback-end system and CPI: HTTP(S) External communication be- tween CPI and authority: HTTP(S) | Personnel Data             | Personnel Data                         |
You can use Secure Network Communications (SNC) to protect RFC connections.
##  Recommendation
We strongly recommend that you use secure protocols (SSL, SNC) where possible.
For more information, see the ABAP Platform Security Guide under Transport Layer Security.
## Data Flow and Processes
Overview of security aspects involved throughout the most widely-used processes in the local version for Slovenia.
B2A: Commuication with Authorities
| Report   | Area   | Document Class   |
|----------|--------|------------------|
| HSICBOL2 | SPOT   | ENDM             |
| Report   | Area   | Document Class   |
|----------|--------|------------------|
| HSICMFR1 | MF17   | M1, M2, M3       |
| HSICPPZ3 | PDPZ   | OVRY             |
## Data Storage Security
For general information about data storage security in Payroll, see Data Storage Security .
The following contains specific information about the logical file names and path names for Payroll Slovenia (PY-SI).
## Logical File Names Used in Payroll Slovenia
The following logical file names were created to facilitate the validation of physical file names:
Logical File Names and Reports
| Logical File Name    | Reports That Use These Logical File Names   | Logical File Path    |
|----------------------|---------------------------------------------|----------------------|
| HR_SI_DIR_APPLSERVER | HSICBEDD                                    | HR_SI_DIR_APPLSERVER |
|                      | HSICBL00                                    |                      |
|                      | HSICBT20                                    |                      |
|                      | HSICDOH1                                    |                      |
|                      | HSICEM43                                    |                      |
|                      | HSICRK18                                    |                      |
|                      | HSICRK28                                    |                      |
|                      | HSICMFR1                                    |                      |
|                      | HSICRK1A                                    |                      |
|                      | FUNCTION-POOL HRBASSI_MFORMS                |                      |
|                      | HSICO1ZM_XML                                |                      |
|                      | HSICO300_XML                                |                      |
|                      | HSICZAP4                                    |                      |
| HR_SI_DIR_DOWNLOAD   | HSICBEDD                                    | HR_SI_DIR_DOWNLOAD   |
|                      | HSICBL00                                    |                      |
|                      | HSICBT20                                    |                      |
|                      | HSICDOH1                                    |                      |
|                      | HSICEM43                                    |                      |
|                      | HSICRK18                                    |                      |
|                      | HSICRK28                                    |                      |
|                      | HSICMFR1                                    |                      |
|                      | HSICRK1A                                    |                      |
|                      | FUNCTION-POOL HRBASSI_MFORMS                |                      |
|                      | HSICO1ZM_XML                                |                      |
|                      | HSICO300_XML                                |                      |
|                      | HSICZAP4                                    |                      |
| Logical File Name   | Reports That Use These Logical File Names                                                                                                        | Logical File Path   |
|---------------------|--------------------------------------------------------------------------------------------------------------------------------------------------|---------------------|
| HR_SI_DIR_FRONTEND  | HSICBEDD HSICBL00 HSICBT20 HSICDOH1 HSICEM43 HSICRK18 HSICRK28 HSICMFR1 HSICRK1A FUNCTION-POOL HRBASSI_MFORMS HSICO1ZM_XML HSICO300_XML HSICZAP4 | HR_SI_DIR_FRONTEND  |
## Sensitive Data
The Human Resources infotypes often contain sensitive data. This data is protected by central authorization objects. For the local version for Slovenia, this includes the personal registration number (EMSO) in the infotype Personal Data (0002) and the employee tax number in the infotype 0603.
## Other Security-Relevant Information
You can use the interface toolbox (transaction PU12 ) to update the taxability model. Currently, there are no special authorizations for this. For more information about the interface toolbox, see section Security for Additional Applications under Payroll .
You have the following options to prevent unauthorized or unintentional updates of the database PCL4 :
- You can use the feature UTXSS to activate and deactivate the authorization checks for the tax report.
- You can use the feature UTXSP to specify codes for spool authorizations depending on the tax company and the tax class.
For more information, see the documentation of the features in the SAP S/4HANA system.
## Related Information
Authorizations [page 247] Authorizations [page 235] Payroll (PY) [page 245]