topic company code restriction for T-code MRIS in Application Development and Automation Discussions

company code restriction for T-code MRIS

Former Member — Tue, 04 Jun 2013 21:14:31 GMT

Hi,

we are trying to restrict the transaction MRIS with company code (F_BKPF_BUK) but the transaction is not checking the object at all and users are able to run the transaction for all company codes.

SU24 has F_BKPF_BUK yes. not sure if the program is actually checking it.

does company code restriction possible for this t-code?

Thanks,

Manoj

Re: company code restriction for T-code MRIS

mvoros — Tue, 04 Jun 2013 23:50:23 GMT

Hi,

have you tried to run trace to see what authorization checks are performed. It might be that user is getting authorization from some other role. In the worse case there is BADI MRM_CHECK that is called before creating MRM document. So you could perform additional authorization checks there. But this check won't prevent selecting documents by report. This might not be goo enough in your scenario. The docs are read from DB in FM ML_READ_INVOICING_SCHEDULE. Here I don't see any authorization check so you could enhance this FM to perform additional check.

Cheers

Re: company code restriction for T-code MRIS

Former Member — Wed, 05 Jun 2013 13:30:00 GMT

Hi Martin,

Trace is not picking any auth checks other than a failed check for s_project.

Thanks for the FM information. I will check on that.

-Manoj

Re: company code restriction for T-code MRIS

Former Member — Wed, 05 Jun 2013 17:02:11 GMT

This message was moderated.