Authorization problems after transporting role

[former_member542460]

Good day, gurus.

I'm facing an issue after transporting a role to PRD system. Role tuning was performed in QAS system and it was required to give specific authorization to "store location (LGORT)" and "plant (WERKS)" (by auth.obj M_MSEG_LGO). It worked fine in QAS system, but it is not working in PRD as expected (its is allowing access to several store locations, not only the required store location). I have already performed role comparison from SUIM TX and it didn't show any difference. So I decided to create a test user and assigned it the role in both QAS and PRD system without any parameters or profiles, but  it is showing the same behaviour (works fine in QAS, but it allows user actions on different store location in PRD).

Could you please give me any recommendation for facing this issue?

Thank you in advance,

[Colleen]

Hi David

Have you asked your Functional team member if they have any configuration to transport to Production to activate this object?

Refer to thread:

http://scn.sap.com/thread/1888498

Regards

Colleen

P.S test user in Production?

[Bernhard_SAP]

ST01/stauthtrace is your friend to identify differences reg. authority-checks......

Pls compare also your SU24 settings between systems....

b.rgds, Bernhard