topic Re: Authorization group restriction in Application Development and Automation Discussions

Authorization group restriction

Former Member — Tue, 24 Apr 2007 07:33:46 GMT

Hi ,

I would like to know how to restrict authorization group FCAR and FCAP.We could see it is related to F_BKPF_BES object .It seems the same authorization object should be given the following access

--display access for documents asigned to authorization group FCAP

--should not allow display for documents assigned to authorization group FCAR

If we restrict using FCAP (displays access)the second condition works fine but the first one it displays line items only for G/L accounts.Vendor line items does not get displayed.

Please let me know your thoughts on this.

Re: Authorization group restriction

Former Member — Tue, 24 Apr 2007 07:51:56 GMT

Hi Mekha,

You can add another object F_BKPF_BES manually and in the first one give

display access for documents asigned to authorization group FCAP and in another no display for documents assigned to Auth group FCAR

**Reward points accordingly

Junaid

Re: Authorization group restriction

Former Member — Tue, 24 Apr 2007 09:10:04 GMT

Hi Mohammed,

I tried by adding another authorization object and gave activity as blank with authorization gruop FCAR.while logging into FB03 It still gives the same error.

"Displays only line items for G/L accounts not for Vendor documents"

Re: Authorization group restriction

Former Member — Tue, 24 Apr 2007 09:31:32 GMT

Hi Mekha,

For displaying vendor line items maintain F_BKPF_BEK object with auth group FCAP

Junaid

Re: Authorization group restriction

Former Member — Wed, 25 Apr 2007 23:27:16 GMT

Mekha,

Would send me trace report like this open trace on and run the step what u are doing and take dump in note pad and send to me I will solve your problem.

Thanks

Happy

Re: Authorization group restriction

manohar_kappala2 — Fri, 27 Apr 2007 15:26:46 GMT

Hi Mekha,

the vendor items a part of which authorization group?

if they are not part of any then you will be able to see them

but if they are included in an authorization group then u need to give the display to that group too for being able to access them.

Manohar