topic Re: Cross pollination restriction in Application Development and Automation Discussions

Cross pollination restriction

Former Member — Sun, 13 Apr 2008 18:49:42 GMT

HI Buddies,

can any one guide me how to restrict cross-pollination bugs in Role. For an example I restricted thr role for a particular Sales Area. while accessing the T-code IW33 it displays all the details irrespective of the restricted sales area. How to restrict that.

Regards,

Vasantha Kumar

Re: Cross pollination restriction

jurjen_heeck — Mon, 14 Apr 2008 06:05:05 GMT

This may be working as designed. You'll have to inspect the whole set of roles assigned to this user.

You cannot take away rights from a user by adding a role.

In fact, restricting is a wrong word here. You did not restrict the user for a particular sales area but granted access to this sales area. If the user has more roles with rights to other sales areas he/she will see all of those.

You'll have to take away all rights for sales areas you want to restrict. For this you'll have to change the already assigned roles or take them away from the user.

hth

Jurjen

Re: Cross pollination restriction

Former Member — Mon, 14 Apr 2008 08:08:50 GMT

Small addition to Jurjens answer (to which I fully agree):

Iw33 is a PM transaction so it is verry obvious it has no relation to sales area and there is no object related that makes it possible to resticton sales area!

Re: Cross pollination restriction

jurjen_heeck — Mon, 14 Apr 2008 08:18:50 GMT

> Iw33 is a PM transaction so it is verry obvious it has no relation to sales area and there is no object related that makes it possible to resticton sales area!

Ah! It was a trick question I didn't even consider the possibillity that checks were missing in the transaction/program.... Thanks for adding.