topic Re: VK33 company code restriction in Application Development and Automation Discussions

VK33 company code restriction

Former Member — Wed, 08 Apr 2009 18:27:33 GMT

Hi -

I've derived a child role with company code A and maintained the new org values in the child role. When the user is doing a negative testing, she was able to display data for company code B along with company code A. This occured for transaction VK33.

Any idea how to restrict VK33 @ company code level?

Re: VK33 company code restriction

Former Member — Thu, 09 Apr 2009 04:26:00 GMT

When you derived a child role from the parent, child role does not inherit the organizational values. It is unlikely that the child role will has company A

Re: VK33 company code restriction

Former Member — Thu, 09 Apr 2009 04:31:50 GMT

She might be getting access to the other company code value B with some other SAP role which is assigned to her earlier.

Please check her profile completely

Re: VK33 company code restriction

Former Member — Thu, 09 Apr 2009 04:33:35 GMT

Dear Reel,

I hope as per the default SAP settings in SU24 for VK33, the system will not check for Company Code level for authorization.

Let me know if I am wrong.

Regards,

Re: VK33 company code restriction

Former Member — Thu, 09 Apr 2009 04:41:47 GMT

Yes, Lakshmi is correct..

VK33 access will be execued against to the sales org value not company code value.

V_KOND_VEA

V_KONH_VKO

V_KONH_VKS

The above three objecst are checked against VK33 access .

V_KONH_VKO is having sales org field which is checking for sales org value.

Re: VK33 company code restriction

Former Member — Thu, 09 Apr 2009 09:50:02 GMT

Check the particular User full authorization user may have company code B some where (Some other role), restrict that first

Re: VK33 company code restriction

Former Member — Thu, 09 Apr 2009 14:46:23 GMT

Hi,

As I checked in my client system, there were no authorization objects except S_TCODE was assigned to tcode VK33 (Condition Maintenance: Display). However I performed a check on source code to see the authorization check statements. It has shown only the below objects.

S_TCODE

V_KONH_VKS Condition: Authorization for Condition Types

hence restriction on company code level is not possible until unless you develop a custom transaction or source code modification.

Regards,

Gowrinadh

Re: VK33 company code restriction

Former Member — Mon, 13 Apr 2009 15:16:20 GMT

Hello,

Please check the role again,you might has given more access intead restrciting for company code level

Thanks,

prasant

Re: VK33 company code restriction

jurjen_heeck — Mon, 13 Apr 2009 15:18:49 GMT

> Please check the role again,you might has given more access intead restrciting for company code level

Previous posts in this thread indicate that company code is not checked for this transaction so re-checking the role is useless.

Re: VK33 company code restriction

Former Member — Mon, 13 Apr 2009 15:24:52 GMT

This message was moderated.