company code restriction for T-code MRIS

[Former Member]

Hi,

we are trying to restrict the transaction MRIS with company code (F_BKPF_BUK) but the transaction is not checking the object at all and users are able to run the transaction for all company codes.

SU24 has F_BKPF_BUK yes. not sure if the program is actually checking it.

does company code restriction possible for this t-code?

Thanks,

Manoj

[mvoros]

Hi,

have you tried to run trace to see what authorization checks are performed. It might be that user is getting authorization from some other role. In the worse case there is BADI MRM_CHECK that is called before creating MRM document. So you could perform additional authorization checks there. But this check won't prevent selecting documents by report. This might not be goo enough in your scenario. The docs are read from DB in FM ML_READ_INVOICING_SCHEDULE. Here I don't see any authorization check so you could enhance this FM to perform additional check.

Cheers

[Former Member]

Hi Martin,

Trace is not picking any auth checks other than a failed check for s_project.

Thanks for the FM information. I will check on that.

-Manoj

[Former Member]

This message was moderated.