‎2006 Sep 25 11:31 PM
I am trying to control certain field values in T-Code <b>FPR2</b>. When I execute the T-Code and enter the "Installement Plan No."; it takes me to next screen where there is a "delete installment" tab. Per requirement all users are not suppose to have that functionality. How do I find the correct "Auth Object" and field values for it so that they have only display ?
PS : 1.Tried Trace method (seems like not working)
2. No variant T-Code allowed
Thanks
‎2006 Sep 26 12:13 PM
Please tell a little bit more about transactions FPR2 and FPR3: To which application component belong these transactions?
In most cases you can inspect the authorization proposals (transaction SU22 or SU24) to view the authorizations objects which are relevant for a transaction.
Kind regards
Frank Buchholz
‎2006 Sep 26 12:42 PM
Hi Naveen,
Installment plans are created using transaction FPR1. They are changed using transaction FPR2, and FPR3 is the display function for installment plans.
What is the constarint in using FPR3 for display to users who are not supposed to change anything.
As already put by Frank, the related Auth objects can always be check by SU22 and SU24.
Br,
Sri
Message was edited by: Sri Raghu Kishore Pusapati
‎2006 Sep 26 4:17 PM
Matter of fact, the problem is with only "<b>FPR2</b>". All end users must have access to it. But there is a "delete installment" tab in it which they are not suppose to use it. This is one of the requirements we got from functional team. I suggested them using "FPR3". That is give "FPR3" to all end users and "FPR2" to supervisors. But still they insist having "<b>FPR2</b>" to everybody but without "delete installment" tab functionality. Thanks in advance for all your suggestions.
‎2006 Sep 26 6:08 PM
Hi Naveen,
What system is this transaction in R/3, CRM, SEM etc? I would look for table usobt_c to see what auth object it checks. Look for any auth object that is pertainant to installments - this probably will control the activity, check to see if delete activity can be unchecked.
Talib
‎2006 Sep 26 9:23 PM
I have checked these Tcodes inthe Best practices doc on Water utilities by SAP.
‎2006 Sep 27 12:55 PM
Hi,
I checked SU24 and found F_KKINSTPL (Auth. for Installment Plans in a Contract Account). It is SAP standard "CM" in SU24 for FPR2 which means that it will be included in roles that include this transaction. It only has ACTVT as a field. ACTVT "B4" is "Deactivate installment plan". ACTVT "F1" is "Approve installment plan".
Please test if restricting this object to ACTVT 02 (as it is the standard authorization suggestion in SU24) helps. Users should not be able to deactivate installment plans without "B4".
Cheers,
Christian
‎2006 Sep 27 1:40 PM
Thanks Guys..yeah..this T-Code (FPR2) is for IS-U module. I tried control using object <b>F_KKINSTPL</b> to ACTVT 02 before. But that doesn't work either..