FTXP Tcode authorisation control

[Lakshmipathi]

I am a SD Functional Consultant and needs some assistance in Basis area.

TCode FTXP is being accessed by many users where they can change the field KONTS value apart from changing the tax percent in the initial screen. The requirement is few users should see only in display mode whatever value is appearing in field KONTS but they can change the tax percent in the initial screen.

I tried to first find out the relevant object for the field KONTS but unable to find out. Hence, I included this field in SU20 with a zee object. Next I created a new role in PFCG and assigned this object for one user and tested for the outcome.

Still system is showing the above field value in editable mode only.

Can somebody take me to the right direction as to where I need to correct / modify the settings so that I can achieve the desired result.

thanks

G. Lakshmipathi

[JPReyes]

Moving to Security forum.

[Lakshmipathi]

Thanks Juan for moving the thread to right forum

G. Lakshmipathi

[arpan_paik]

 I tried to first find out the relevant object for the field KONTS but unable to find out. Hence, I included this field in SU20 with a zee object. Next I created a new role in PFCG and assigned this object for one user and tested for the outcome.
Still system is showing the above field value in editable mode only.  

It will work if the object been included in program logic for a authority-check loop.

You can trace the transaction and see if any standard object is checked and related to the field you have mentioned.

Regards,

Arpan Paik

[Lakshmipathi]

if the object been included in program logic for a authority-check loop

Not sure what do you mean by this. As I indicated earlier, after searching the forum as to how to find an object for a given field, I checked in SU20 where the field KONTS is not included. So I included and assigned a zee object to that field.

Thanks for looking into the issue.

G. Lakshmipathi

[Former Member]

Hi Lakshmipathi,

I've verified transaction code FTXP and find that there are no authorization check included. The only check that you can enable is on Condition types (using authorization object V_KONH_VKS) and KSCHL (Condition type). To enable this, you need to goto SU24 and make the authorization object Proposal as Yes. This will enable the authorization check.

Regards,

Raghu

[Former Member]

That means you added such a field to the authorization field list. That is not going anywhere until you add it to a zee-object and add the zee-object to the code.

I dont see a KONTS field anywhere, but there are some function modules which have authority exceptions however they are called in NO_AUTHORITY_CHECK = 'X' import parameters. So you will have to use one of the enhancement ponit options in those functions to turn the check on again.

Is it possible that KONTS has something to do with the new G/L?

Cheers,

Julius

[Lakshmipathi]

Let me rephrase the requirement once again as to what is being followed practically at my client place.

There are some 20 FI users in different plants in and around India and all are having FTXP authorisation to change both the percent value in the initial screen and also the G/L Account.

Recently, for one tax code, an user has changed the G/L Account due to which, sales postings in FI from other plants was posted to wrong G/L Account.

Under the circumstances, client want a restriction such that FI users can change the tax percent in the initial screen which means this will be editable and at the same time, they should not change the G/L Account assignment made in the Tax Accounts tab. So this tab should be in display mode. Only one user can change both the tax percent and value.

So can you please let me know how come SD condition types will relate to this requirement ??

thanks

G. Lakshmipathi

[Lakshmipathi]

That means you added such a field to the authorization field list

Yes Mr.Julius. Initially, the field KONTS was not there in SU20 which I added subsequently. Next in SU21 for Object Class FI, I added a zee Object and assigned the fields KONTS and KTOSL with the Activity 01 & 02 for KTOSL and 03 to KONTS. Finally, I created two roles in PFCG and assigned the above objects with TCode FTXP respectively.

Now when I checked with the user to whom I set as display, system is showing in editable mode in FTXP screen. So can you please assist where I went wrong.

Since my Basis person has went on a long live and I need to complete this task, I had to dig into Basis area which is new to me but I am quite enjoying this challenge

thanks

G. Lakshmipathi

[Former Member]

Zee check on zee object must also be in zee code, otherwise it will do nothing.

After the check at the correct enhancement spot, you must modify the screen parameter. Also double-check what a double-click does...

Easiest would be to train the folks though so that they use the tcode correctly.

Cheers,

Julius

[Lakshmipathi]

Thanks Will work on this logic

G. Lakshmipathi