authorization error

[Former Member]

hi

one of fi user is facing problem when he run fbl5n and go to customer account search by company code,

it gives error no value for this selection

when i use su53 there is giving some

authorization obj. s_project project managment.project authorization

authorization field ACTVT activity

< dummy>

authorizationfield APPl_COMP application componenet ID

<dummy>

authorizationfield PROJECT_ID project name

<dummy>

authorizationfield PROJ_CONF confidential activity flag

<dummy>

[Former Member]

Hi,

Perform a trace using ST01 on the required user or check in SU24 for corresponding authorization objects of this transaction.

[Former Member]

now there is no showing any missing atuhorizaion, but problem is still same

[Former Member]

Hi,

Are you sure, the object is S_PROJECT.

Pls try one more time, put on trace and see what objects it is asking for. You can use su53 also at the same time.

If a missing auth is displayed, check in su24 if that object is present and check it check indicator flag . Make sure it is CHECK if you need the object for your profile. Re-generate the profile and maintain the values shown in the trace.

Regards,

Brahmeshwar.

[Former Member]

I just ran the trace and found that below objects are used.

F_BKPF_KOA

F_KNA1_BUK

F_BKPF_BUK

with activity 03.

It also checked for authorization to transaction code FB02 with below values. try giving access to FB02 and check.

S_TCODE RC=0 TCD=FB02;

F_BKPF_BUK RC=0 ACTVT=02;BUKRS= ;

S_ALV_LAYO RC=0 ACTVT=23;

S_GUI RC=0 ACTVT=61;

S_ALV_LAYO RC=0 ACTVT=23;

F_IT_ALV RC=0 ACTVT=01;

F_IT_ALV RC=0 ACTVT=02;

F_IT_ALV RC=0 ACTVT=70;

Regards,

Gowrinadh

[Former Member]

Dear poloju,

now there is shoing any missing authorization, but problem is still same

[Former Member]

sorry last massage was wrong. not shoing missing atuhorization,

[Former Member]

Rajesh,

To display search results for customer account, you need F_BKPF_KOA with display access to customer accounts, with this atleast you should be able to view the results.

May be there are no values maintained under your company code. Pls cross check.

Regards,

Brahmeshwar

[Former Member]

if i run same t-code in another user. there is showing value under this company.

[Former Member]

Rajesh,

Lots better.

Put on trace for your colleague and check out what objects it is calling for him.

Once you are ready with objects, check in auth profile if those are present.

I assume that you both have same set of role menu.

one more idea, Create a test user, just give fbl5n, run it. You would know what objects it is looking for.

Regards,

Brahmeshwar.

[Former Member]

i created new test user, i have give fbl5n and sap_all, but in this user there is coming same problem

[arpan_paik]

Hi Rajesh,

As SAP_ALL also failed then definitely this is NOT authorization issue. I doubt any of the below or both of them.

1) Input for successful user is different

2) Parameter settings is different

Arpan

[Former Member]

hi Arpan

can you give me how can i check both setting.

1) Input for successful user is different

2) Parameter settings is different

thanks

Rajesh

[arpan_paik]

Hi Rajesh,

It is very much clear now. When you are intending to fetch some data from SAP you need to give proper combination. For example if you are entering an role name in SUIM and give your own user ID in user field. If that role is not assigned to you so it will through you message that 'no data selected'

Like that here the combination you are giving in transaction FBL5N there is no data in SAP

For successful user you input the same where you are not getting data, I can bet you will get the same results as of unsuccessful users.

However regarding parameter I guess you do not need to check now as input seems to be wrong.

So you need to get back to FI team and ask for proper inputs parameter in FBL5N

Arpan

[Former Member]

>

> As SAP_ALL also failed then definitely this is NOT authorization issue. I doubt any of the below or both of them.> 

Hi Arpan, though I tend to agree with you in this situation, be careful when saying that SAP_ALL removes doubt over an auth issue. As delivered, SAP_ALL does not contain all standard or custom auth objects, nor does it help when there has been some hard coding by developers.

[Former Member]

there is one issue,

i have two user usr1 and usr2 and both have diffrence role, use2 can acces but user1 couldnot access. i have define all autoriization to usr1, but problem is still same user2 cant access. if i copy a role in user2 which is already difine in user1, then it works, what should i do,

if i create a new user and give all authorization then i face same problem.

thanks

[Former Member]

Do they have exactly the same parameter ID's & values?

[arpan_paik]

Hi Rajesh,

As the error message is showing no data selected so that means for input combination there is no data in the system. Input need to be verified. But another user is getting output for same input. Double check input for both the users.

If input is same then look into user parameter.

Change all the parameter of unsuccessful user and made them same like successful user.

If still problem persist then look into trace for unsuccessful user. But it seems you already did that and find no missing authorization relevant to FI objects. So last option left is to get back to FI consultant.