Authorization object change

[Former Member]

Hi,

As per requirement, we need to check and maintain the object-M_MATE_MAR for ME21n and ME22n.

Normally it is check only in SU24.Is it suggestible to do the change to check and maintain and what is the impact in this for existing useru2019s authorizations.

Please check and advice in this.

Thanks & Regards,

KKRao.

[Former Member]

The impact will be that the user gets the authorization - (on the strength of ME21N and ME22N already).

Please revert back if in doubt about the same. - (there should be no doubt though).

Happy darasa,

Julius

[Former Member]

Hi Julius/Dipanjan,

Thanks for your reply.

Sorry, there is a wrong communication in my post.

We need to restrict user access to ME21n and ME22n based on Material Type.

We assumed that if we check and maintain the object- M_MATE_MAR(Material Master: Material Types) in SU24,it will restrict access based on Material Types. But the above mentioned object is not maintaining Material Types in authorization fields.

So it is not the correct object for restricting user access to ME21n and ME22n based on Material Types.

Is there any possibility to restrict user access to ME21n and ME22n based on Material Types?

Please check and advice in this.

Thanks & Regards,

KKRao.

[Former Member]

Hi,

Could you please advice on this issue.

Thanks & Regards,

KKRao.

[Former Member]

M_MATE_MAR has no relation to Purchasing (ME2N, ME5N). you cannot restrict purchasing orders (requistions) to material type.

please think about it!! (now when did i say exactly the same thing last?)

1.) the logical explanation: purchasing documents are created on level of the the purchasing organisations and maybe but not necessarily a company code. the material type is on client level. what sense would it make to check client level authorizations when you are already 3 steps down the stairs??

2.) the facts: go to SE38 and look at the complete code (including FMs) of SAPLMEPO. find me one place that does an authority check on M_MATE_MAR.

Edited by: Mylene Euridice Dorias on Sep 29, 2009 8:38 AM

[sdipanjan]

If you change it to C/M in SU24, then you need to investigate also how many roles are containing these two Tcodes. Then go to those roles and re-generate the profile by entering into the Authorization Tab by "edit old status and merge..." mode. If you don't wish to happen this check for some specific role, then deactivate there. Otherwise fill up with your desired value as per the design.

@Julius: what is darasa? did you tried to write Dasera?

Regards,

Dipanjan