ESS Security

Hi,

I am having an issue with ESS Security. We are using Context Authorization.

Under P_OriginCon we have the following Authorizations in ESS Role.

Authorization level            M

Infotype                           *

Personnel Area                 *

Employee Group               *

Employee Subgroup          *

Authorization Profile          *

Subtype                           *

Organizational Key             *

Under P_PERNR we kept the following authorizations

Authorization level            M, R, W

Infotype                       *

Interpretation of assigned per (Psign)  *

Subtype                        *

My question is that under P_Origincon If I put Authorization level as M, R in ESS Role and if the ESS role is assigned with any other Derived Role to a user id. The authorization restrictions that are incorporated for field $PERSA   which is 2004 in the derived role is not working  if ESS Role is assigned along with derived role to a user id. If there is no ESS Role assigned to a user Id then derived role authorization restriction is working.

Please, help how to make a user id work with a derived role restriction when ESS role is assigned to it.

Regards,

reshma