Blocking purchase order ,material master, vendor master for certain users

[Former Member]

Hi ,

My requirement is I have to restrict access for certain users to create, maintain and display IML vendors, purchase orders and materials.

It is required to do restrictions using:

'ZIML' vendor account group (field LFA1-KTOKK)

'ZIML' purchase order document type (field EKKO-BSART)

'ZIML' material type (field MARA-MTART)

The transactions to be blocked for these users are MM01,MM02 ,MM03, ME21N,ME22N,ME23N,XK01,XK02,XK03.

I am not sure whether I have to create authorization objects for this requirement because I have to check a particular value (ZIML) for these fields. Please help in achieving this requirement.

[Former Member]

Hi ,

My requirement is I have to restrict access for certain users to create, maintain and display IML vendors, purchase orders and materials.

It is required to do restrictions using:

'ZIML' vendor account group (field LFA1-KTOKK)

'ZIML' purchase order document type (field EKKO-BSART)

'ZIML' material type (field MARA-MTART)

The transactions to be blocked for these users are MM01,MM02 ,MM03, ME21N,ME22N,ME23N,XK01,XK02,XK03.

I am not sure whether I have to create authorization objects for this requirement because I have to check a particular value (ZIML) for these fields. Please help in achieving this requirement.

[Former Member]

hi... i recommend you to use Authorization Objects...

[Former Member]

This could be done using 'Authorization Objects'. Please find below the Auth object tutorial.

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/a92195a9-0b01-0010-909c-f330ea4a5...

Edited by: WDAbap on Jul 26, 2010 8:01 PM

[craig_scott2]

The standard auth object for checking Material Type (M_MATE_MAR) is already checked in the MM01/02/03 transactions. You might also want to check the same auth object when processing Purchase Orders, but you'll need to make enhancements to check the M_MATE_MAR object since the PO transactions don't already check that auth object. I haven't looked at vendor master authorizations.

To restrict by material type, you need to assign authorization groups to each material type and then assign the authorization groups to each user role. The MM01/02/03 transactions will only check the authorization if a (non-blank) authorization role is assigned to the material type being used. Another thing to be aware of is that for a specific authorization object (eg. M_MATE_MAR), if you want to prevent access to certain material types for some users, you have to explicitly define access for all users.

.. Craig

[Former Member]

What is the user exit that gets triggered when I create a purchase order? How can I find that......

My req is.

How to block a user from creating certain purchase type types? Which user exit I should write the authorization check?

[Sridharnekkanti]

Why you need user exit for this. By using the authorization objects assignment to the user profile you can restrict the authorization levels.

[Former Member]

User exit is required because I have to check for material type field also (calling the auth object M_MATE_MAR) and if this check passes then i have to check the vendor account group field , calling the auth object (F_LFA1_GRP). If all these checks pass then only the user will be allowed to create , change or display the purchase order .

Will the auth object M_BEST_BSA will be helpful for PO document types or I have to create custom auth object for it?

Please help in finding the user exit where I should write my code.

[Former Member]

I have found an include ZXMO6U43 in which I tried writing some code and while creating the PO in ME21N , that part of code worked. But I am not sure whether this is the correct one or not. Please suggest.