topic Re: Role authorization in Application Development and Automation Discussions

Role authorization

Former Member — Fri, 13 Jun 2008 07:00:08 GMT

Hi Experts,

I have created two roles

zhead1 and zhead2

Now at organization level we have

Plant and sales office and both have similar code.

My pt is I want to giv all access to zhead1 but want to restrict zhead2 to plant itself.

Now when I goto organization level I can see plant codes but cant see sales office code.

any idea why sales office code is not visible at oranization level while creating roles ?

Many Thankx in advance

Mani

Re: Role authorization

former_member74904 — Fri, 13 Jun 2008 08:01:40 GMT

I assume that 'sales office' has not yet been declared an organizational level.

you can do this by running report PFCG_ORGFIELD_CREATE.

note: [323817|https://websmp230.sap-ag.de/sap(bD1ubCZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=323817|323817]

Re: Role authorization

Former Member — Fri, 13 Jun 2008 08:02:28 GMT

The likely reason for this is that you have not included a transaction in the role which has been configured in SU24 to pull through an auth object containing Sales office.

Re: Role authorization

Former Member — Fri, 13 Jun 2008 09:11:07 GMT

well, some how now the sales office field is also coming.

Now the problem is when i restricted 2nd user to just one sales office but still he can select others too.(va11)

sales office cdes are lik - 1100,2001,3001.....................

I have given access to just 2001 under organization level but still tht user can select all others.

why its so ????

Regards & Thanks

Mani

Re: Role authorization

Former Member — Fri, 13 Jun 2008 09:31:55 GMT

depends on when the autorisation check is programmed. please try to save a record with the "wrong" sales office, probably you will not be able to. So this check is programmed on save!

Edited by: Auke Visser on Jun 13, 2008 11:32 AM

Re: Role authorization

Former Member — Fri, 13 Jun 2008 11:00:21 GMT

Thts saving at the end also.

Anything else I can chk ???

Re: Role authorization

Former Member — Mon, 16 Jun 2008 05:44:23 GMT

Can nyone help on this topic plz ???

Re: Role authorization

Former Member — Mon, 23 Jun 2008 06:08:02 GMT

Well I got fixed.

Thanks to all

Re: Role authorization

Former Member — Mon, 23 Jun 2008 06:08:51 GMT

Well I got it fixed.

Many thnks to all