Solved: FBL5N authority check - KKBER

rodrigo_paisante3 · ‎2015 Jul 15

Hello experts .
We want to restrict KKBER field in FBL5N transaction. It is a field that only appears in the list of data.
Does anyone know if it is possible ? If there is any authority check or some note to be applied ?

Thanks in advance.

Best regards.

AntonFarenyk · ‎2015 Jul 15

Agreed with Jelena, please clarify your requirement.

To restrict from authorization point of view please take a look at auth. object F_KNKA_KKB. In Standard SAP it’s not added in a role with FBL5N but you’ll be able to switch in on in SU24. Then you’ll need to adjust role(s) containing FBL5N.

Jelena_Perfiljeva · ‎2015 Jul 15

What do you mean exactly by "restrict"? It can be at least 3 different things in SAP...

Also - have you searched Google for FBL5N BADI and user exits? There is plenty of information already posted on SCN.

rodrigo_paisante3 · ‎2015 Jul 17

Hi Anton Farenyk, Jelena Perfiljeva and Maulik Thakkar, thanks for your return.

Sorry about my bad english..

We want to block some records.

The user today can see all records of KKBER.

I will talk with our security and basis about object F_KNKA_KKB.

If it works I will return.

And if not too.. lol

Best regards.

maulik · ‎2015 Jul 15

You don't need a security role.

Create a layout variant and save it as default.

On the selection screen you have the option of specifying the layout variant.

There is blue "I" icon on the selection-screen that documentation to get you started on customizing it.

AntonFarenyk · ‎2015 Jul 15

Agreed with Jelena, please clarify your requirement.

To restrict from authorization point of view please take a look at auth. object F_KNKA_KKB. In Standard SAP it’s not added in a role with FBL5N but you’ll be able to switch in on in SU24. Then you’ll need to adjust role(s) containing FBL5N.

rodrigo_paisante3 · ‎2015 Jul 22

Thanks all for your return!

But we don't solve this problem yet.

We tried to add F_KNKA_KKB object, but FBL5N still showing all records values of KKBER - and user could only see one type.

Former Member · ‎2015 Jul 22

Hi Rodrigo,

Not sure if it is possible by just setting up the Authorization values. But there is a BADI FI_ITEMS_CH_DATA (METHOD CHANGE_ITEMS ) which I think can be used to filter entries.

This Badi is called inside FM FI_ITEMS_DISPLAY.

So the logic can be.

Loop through CT_ITEMS table.

Check if user has got authorization for CT_ITEMS-KKBER.

If not.

Delete the entry from the CT_ITEMS table.

Endloop.