topic Re: Authorization Question in Application Development and Automation Discussions

Authorization Question

Former Member — Wed, 30 Jul 2008 15:54:24 GMT

Hello All,

For one of the requirement we are in process of copying the SAP_ALL profile into a new custom role and edit all the authorization ACTVT (activity) field values to with "03 - Display ". I had generated the

newly created role.

After this If I assign this new role to a user id and go to VA03 it let me to enter the VA03 initial screen and If I select a sales order number and try to view details it is throwing the authorization error about the sales area "No authorization for displaying sales documents in 1000 10 00"

Message no. V1514

Diagnosis

According to the settings in your user master record you do not have the authorization to execute this function.

Procedure

If you need this authorization, contact the person responsible for assigning authorizations.

Authorization object: V_VBAK_VKO

I had checked the Auth. object "V_VBAK_VKO" It has those values already assigned.

What might be the issue?

Thanks for your help in advance.

Thanks,

Greetson

Re: Authorization Question

former_member70391 — Wed, 30 Jul 2008 16:08:17 GMT

Hi ,

Check whether in the newly create profile under object following fields are updated.

SUIM-> Profiles-> First Radio button(profile). Enter your profile name and execute. Check the profile in the object V_VBAK_VKO

ACTVT 03

SPART 01

VKORG 1000

VTWEG 01

Enter the details accordingly 1000 10 00 in SPART, VKORG, VTWEG. Also possible that this object is not activated properly.

Thanks & Regards,

Nagaraj Kalbavi

Re: Authorization Question

Former Member — Wed, 30 Jul 2008 17:16:42 GMT

Hello Nagaraj,

I found the problem .. Problem is the role that I had copied had many inactive authorization objects inside it. But the object V_VBAK_VKO is active. I had tested it by creating another role that has only required auth. obj for sales order display and it is working fine.

I am not sure what is wrong when i blinldly replace the ACTVT field with value "03:- for display functionality for all the auth objects. Only for few objects that are inactive that I can see in the first role that I had seen.

Any hint??

Thanks,

Greetson

Re: Authorization Question

former_member70391 — Wed, 30 Jul 2008 18:33:13 GMT

Hi,

Normally when you create a profile you should start from creating individual objects of it. Like S_TCODE, V_VBAK_VKO etc. Before you update these into new profile the individual objects should be active then you should add these into profile and activate.

If any one of the object is inactive then profile does not work. Also sometimes when you assign profile to the user it will not work. User has to log out and login again to the system to get it active.

You can use Su02 to make necessary changes to the profile and its object and activate it.

Hopefully it resolved your questions.

Thanks & Regards,

Nagaraj Kalbavi

Re: Authorization Question

former_member70391 — Thu, 31 Jul 2008 09:14:56 GMT

HI Geetson,

Good to know that your problem is resolved. To get more informations on this check the SAP Help in the below link.

http://help.sap.com/erp2005_ehp_03/helpdata/EN/52/6715f0439b11d1896f0000e8322d00/frameset.htm

Thanks & Regards,

Nagaraj Kalbavi