0 is also a possible value for this. As far as I remember this is the same as 1 with the difference, that you can access per.nr. which have never been integrated IF your P_ORGIN/XX/CON.PROFL value is *.
if the users are facing this issue since a few weeks and no change in authorizations have been done - then maybe this is a master data issue? have you checked the pernr they are trying to access. I think this might reach a point where we would need more details on the actual testing including data and auth roles.