## 13.3.4.2.7.8  Country/Region-Specific Features: Czech Republic
Overview of security-relevant information for payroll and personnel administration for the local version for Czech Republic
## Authorizations
The local version for Czech Republic uses the standard authorization concept used by SAP S/4HANA. Therefore, the recommendations and guidelines for authorizations as described for SAP S/4HANA also apply to the local version for Czech Republic.
## Standard Authorization Objects
The local version for Czech Republic uses the security-relevant authorization objects that are available for Personnel Management and Payroll.
The following table shows the security-relevant authorization objects that are also used in the local version for Czech Republic.
Country/Region-Specific Authorization Objects
| Authorization Object   | Field                                                                              | Value   | Description                                                  |
|------------------------|------------------------------------------------------------------------------------|---------|--------------------------------------------------------------|
| P_CZ_HI_ID             | P18_HIAREA (Usage area - authorization) P18_HI_ID (Insurance con- tribution payer) |         | Authorization for the insur- ance contribution payer (HI)    |
| P_CZ_SI_ID             | P18_SIAREA (Usage area - authorization) P18_SI_ID (Insurance con- tribution payer) |         | Authorization for variable symbol                            |
| P_CZ_RTEEX             | REPID (ABAP Program Name)                                                          |         | Czech Republic: Export run- time of the report environ- ment |
| P_CZ_SOFID             | P18_S_OFID (Service office ID)                                                     |         | Service office - public sector                               |
| P_CZ_TX_ID             | P18_TXAREA (Usage area - authorization) P18_TAX_ID (DIC)                           |         | Authorization for DIC                                        |
| P_CZ_USRIC             | P18_TRX_UN (ISPV TREXIMA name) P18_TRX_IC (TREXIMA ICO)                            |         | Authorization object for ISPV TREXIMA in B2A                 |
## Communication Channel Security
The following table shows the communication paths that the local version for Czech Republic uses, the protocol used for the connection, and the type of data transferred.
| Communication Paths   | Protocol Used                                                                                                                   | Type of Data Transferred   | Data Requiring Particular Protection   |
|-----------------------|---------------------------------------------------------------------------------------------------------------------------------|----------------------------|----------------------------------------|
| ONZ                   | Internal communication be- tween HRback-end system and CPI: HTTP(S) External communication be- tween CPI and authority: HTTP(S) | Personnel Data             | Personnel Data                         |
| ELDP                  | Internal communication be- tween HRback-end system and CPI: HTTP(S) External communication be- tween CPI and authority: HTTP(S) | Personnel Data             | Personnel Data                         |
| NEMPRI                | Internal communication be- tween HRback-end system and CPI: HTTP(S) External communication be- tween CPI and authority: HTTP(S) | Personnel Data             | Personnel Data                         |
| eNeschopenka          | Internal communication be- tween HRback-end system and CPI: HTTP(S) External communication be- tween CPI and authority: HTTP(S) | Personnel Data             | Personnel Data                         |
| HZUPN                 | Internal communication be- tween HRback-end system and CPI: HTTP(S) External communication be- tween CPI and authority: HTTP(S) | Personnel Data             | Personnel Data                         |
You can use Secure Network Communications (SNC) to protect RFC connections.
##  Recommendation
We strongly recommend that you use secure protocols (SSL, SNC) where possible.
For more information, see the ABAP Platform Security Guide under Transport Layer Security.
## Communication Destinations
You can communicate using the 'Field of Study' API. The communication channel is encrypted with 128 Bit SSL. Data is transferred using the protocol HTTPS.
The following table presents an overview of the communication destinations that the local version for Czech Republic uses.
Communication Destinations
| Destination          | Provided   | Type   | Description    |
|----------------------|------------|--------|----------------|
| HR_CZ_OBORY_VZDELANI | No         | HTTPS  | Field of Study |
## Data Storage Security
For general information about data storage security in Payroll, see Data Storage Security .
The following contains specific information about the logical file names and path names for Payroll Czech Republic (PY-CZ).
## Logical File Names Used in Payroll Czech Republic
The following logical file names were created to facilitate the validation of physical file names:
Logical File Names and Reports
| Logical File Name                   | Reports That Use These Logical File Names                                                                                                                        | Logical File Path        |
|-------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------|
| HR_CZ_DIR_DOWNLOAD                  | RPUTRXT0 RPCZPLT0 RPCZIPT0 RPCTRXT0 RPCREGT2S RPCPEFT1 RPCPEFT0 RPCELDT2TM RPCELDT2S RPCELDT2P RPCELDT2M_09 RPCELDT2MCL_DDP RPCELDT2MCL_09 RPCELDT2MCL RPCELDT2M | HR_CZ_DIR_DOWNLOAD       |
| HR_CZ_DIR_UPLOAD                    | RPDOWNT0                                                                                                                                                         | HR_CZ_DIR_UPLOAD         |
| HR_CZ_PVS_NEMPRI_FILE_NAME_APP SERV | RPCDNPT9                                                                                                                                                         | HR_CZ_PVS_NEMPRI_APPSERV |
| Logical File Name                      | Reports That Use These Logical File Names   | Logical File Path           |
|----------------------------------------|---------------------------------------------|-----------------------------|
| HR_CZ_PVS_NEMPRI_FILE_NAME_FRO NTEND   | RPCDNPT9                                    | HR_CZ_PVS_NEMPRI_FRONTEND   |
| HR_CZ_RPCTAXT0_XML_FILE_NAME_A PPSERV  | RPCTAXT0 RPCRZNT0                           | HR_CZ_RPCTAXT0_XML_APPSERV  |
| HR_CZ_RPCTAXT0_XML_FILE_NAME_F RONTEND | RPCTAXT0 RPCRZNT0                           | HR_CZ_RPCTAXT0_XML_FRONTEND |
## Sensitive Data
The Human Resources infotypes often contain sensitive data. This data is protected by central authorization objects. For the local version for Czech Republic, this includes the Birth ID Number in the infotype Personal Data (0002).
## Related Information
Authorizations [page 247]
Authorizations [page 235]
Payroll (PY) [page 245]