Org levels in DEV created but not available in PFC...

Former Member · ‎2011 Jan 21

Hi

This may be a post for another thread but I'll start it off here and hope for the best...

Our functional guys have, at some point, created new sales orgs, purchase orgs, plants etc for new business which came on line. The trouble is that PFCG isn't registering their existence in the org level drop downs - there are exactly 30 entries short between DEV and QAS and PROD.

Taking the sales org tables TVKO and V_TVKO there are 57 entries in DEV001, QAS and PROD but, selecting from PFCG in the config client DEV011 (where we also build roles so this is where it all happens) when creating a role there are only 27 entries. DEV001 has 57...

I've asked for a new (temporary) org level to be created to see if that one populates automatically which I'm still waiting on to see if this was a blip or still an issue.

Does anybody know if/how to 'jiggle' the various tables supporting org levels to make them visible to PFCG or is this a lost cause?

Cheers

David

Edited by: David Berry on Jan 21, 2011 12:50 PM

jurjen_heeck · ‎2011 Jan 21

I suggest a notes search for "input help" and "PFCG". Input help may depend on different tables.....

Former Member · ‎2011 Jan 21

Hi ,

Get through the SNOTES 323817 and implement it . It resolves the problem.

Regards

Kantikiran

jurjen_heeck · ‎2011 Jan 21

 Get through the SNOTES 323817 and implement it . It resolves the problem.

This answer is incorrect

The note is about promoting authorization fields to become organizational. OP's problem lies in the dropdown values for input help.

jurjen_heeck · ‎2011 Jan 21

the config client DEV011 (where we also build roles so this is where it all happens) when creating a role there are only 27 entries. DEV001 has 57...

Are you talking about different clients here? In that case you may want to compare the actual table contents between 001 and 011....

Former Member · ‎2011 Jan 21

Hi Jurjen

Just tried the "input help" and "PFCG" and there doesn't seem to be anything related.

The tables in DEV001 and DEV011 (where we build roles) are identical e.g. hitting the test button shows 57 entries in SU20 for VKORG but, when creating or changing a role in DEV011 we can only see 27 entries for the sales org and any other org levels. In DEV001 all 57 appear in thr role drop-down.

The new temporary sales org was created and was immediately available in PFCG so this looks to be a blip in the client rather than current and ongoing. Rumour has it that there may have been some issues during a copy back which may be the cause of this so we've sent it over to the basis chaps to chew over...

@Kantikiran - thanks for trying 323817 isn't the one as already flagged but appreciate your time.

Cheers

David

Former Member · ‎2011 Jan 21

You may have already tried this.. But did you try to refresh the options, Just hit F7 when the F4 help opens up. It works wor aormal authorization values. I never had the need to use it with org levels.

Regards,

Chinmaya

Former Member · ‎2011 Jan 21

Hi

That would probably only have worked to allow access to all activities in an object rather than org levels but, even so, that particular avenue has been closed last year

Cheers

David

Former Member · ‎2011 Jan 21

If it was some technical DDIC error from a copy then display TVKO in SE11 and choose the menu Utilities -> Runtime object -> check and Utilities -> Database object -> check.

Any errors reported?

That some sales orgs are displayed and others not would rather imply that some of the entries in TVKO are incomplete. Compare the tables between PROD and DEV for all fields. I think the operative word in "emergency repairs"...

Cheers,

Julius

Former Member · ‎2011 Jan 22

Hi

DEV011 seems to be okay for TVKO but I'm not sure what I'm looking at as I have no access to SE11 in Prod - will update on Monday

Table TVKO: Check Database Object

The database object is consistent

Fields: Consistent with the runtime object

Field name Posi Data type Lengt Deci. Not null Default

MANDT 1 VARCHAR2 3 X '000'

VKORG 2 VARCHAR2 4 X ' '

WAERS 3 VARCHAR2 5 X ' '

BUKRS 4 VARCHAR2 4 X ' '

ADRNR 5 VARCHAR2 10 X ' '

TXNAM_ADR 6 VARCHAR2 16 X ' '

TXNAM_KOP 7 VARCHAR2 16 X ' '

TXNAM_FUS 8 VARCHAR2 16 X ' '

TXNAM_GRU 9 VARCHAR2 16 X ' '

VKOAU 10 VARCHAR2 4 X ' '

KUNNR 11 VARCHAR2 10 X ' '

BOAVO 12 VARCHAR2 1 X ' '

VKOKL 13 VARCHAR2 2 X ' '

EKORG 14 VARCHAR2 4 X ' '

EKGRP 15 VARCHAR2 3 X ' '

LIFNR 16 VARCHAR2 10 X ' '

WERKS 17 VARCHAR2 4 X ' '

BSART 18 VARCHAR2 4 X ' '

BSTYP 19 VARCHAR2 1 X ' '

BWART 20 VARCHAR2 3 X ' '

LGORT 21 VARCHAR2 4 X ' '

TXNAM_SDB 22 VARCHAR2 16 X ' '

MWSKZ 23 VARCHAR2 2

XSTCEG 24 VARCHAR2 1

J_1ANUTIME 25 VARCHAR2 1

MAXBI 26 VARCHAR2 3

PLAUFZ 27 VARCHAR2 3

PLAUEZ 28 VARCHAR2 1

Indexes: Consistent with DDIC

Unique index TVKO______0

MANDT

VKORG

Edited by: David Berry on Jan 22, 2011 5:17 PM

Former Member · ‎2011 Jan 22

Hmmm...

If the contents of the tables are the same as well, then plan C is that there is a search help exit active for the sales org.

If it is client specific in DEV only then debug the value popup on variable sy-mandt using a shortcut file.

It would not be entirely unusual for an old system that a change was made and deleted out of the request queue without the original having been restored from the version history.

Cheers,

Julius

Edited by: Julius Bussche on Jan 22, 2011 10:46 PM

mvoros · ‎2011 Jan 24

Hi David,

if you have access to ST01 you can trace SQL queries. You will get a list of all queries so you can figure out if the problem is within data stored in DB or there is something else such as search help exit mentioned by Julius.

Cheers

Former Member · ‎2011 Jan 25

Hi Martin

Thanks for helping, I have ST01 in DEV but I'm not sure how/what to check to enable an SQL trace (never gone that far into traces!)

Options in 4.6C are:

Input/output

Memory management

Task handling

Authorization check

General from C

Gen. from ABAP prog.

DB: General use

DB: Dictionary use

DB: General access

DB: Access DB-specific

Calls from C modules

ABAP program calls

Lock operations

RFC calls

Internal table memory

Still waiting on the basis chaps to explain what happened and if there are any easy options to restore the data but they seem to have gone into hiding after the recent full moon. Once they remember where they left their clothes in the woods and made it back home after the feeding frenzy I might get some response

Cheers

David

Former Member · ‎2011 Jan 25

If you can see the sales orgs in SE16 from the same client and there are no DDIC problems, then it is either a buffering issue or a search help exit IMO.

Buffering issues should clear themselves after a while, so if it is persistant... then debug the search help popup to see whether there is any "foreign" looking code in there and whether the internal tables contain all the records after selecting them.

But anyway, for the SQL trace use tcode ST05.

Cheers,

Julius

mvoros · ‎2011 Jan 25

Check only option DB General access or as Julius mentioned use ST05. The result will be same. You will get a list of all SQL queries. So if you perform same steps in each system you should get same sequence but number of returned results will be different for some queries. It's not a quick method because you will see heaps of queries related to loading program and so on.

You mentioned that you don't have access to SE11 but if you have access to SE16 then check database view DD30V. Look for your search help and if there is any value in field SELMEXIT then that's the name of function module which implements search help exit. You can check it in SE37 if you have access.

Cheers

Former Member · ‎2011 Jan 27

Hi

I'm throwing in the towel on this one unfortunately as a lost cause and getting the functional guys to have another look at it. They're going to try changing (or tricking SAP into thinking so) one or two org level values to see if they then appear in PFCG.

Thanks to all for your efforts - much appreciated

David

Former Member · ‎2011 Jan 27

Tell them to debug the value help popup...

Former Member · ‎2011 Jan 27

Hi Julius

Sorry - you did tell me already...

If it is client specific in DEV only then debug the value popup on variable sy-mandt using a shortcut file.

I'll have another go tomorrow...

Cheers

David

Former Member · ‎2011 Jan 28

Hi

Basis has done a little more digging into the issue in DEV011 not matching DEV001, QAS or PRD and found a custom function module Z_TVKO_EXIT_CHECK and custom table ZDTVKO which contains the missing sales orgs in DEV011 but has no entries in DEV001. This looks like it is preventing the proposals in PFCG for sales orgs.

Not sure what this was built for but getting there - thanks for the guidance.

Regards

David

Former Member · ‎2011 Jan 28

If they expected the search help exit to be client independent, then they should not have made it client specified = sy-mandt.

That is the bugger with all there redundant "check-tables" - you have to maintain them all redundantly...

Good news for you however is that in higher releases and EhPs the search helps have been improved as far as authority-checks on displaying org. elements and some master data is concerned ( customer and vendors etc). This means that these exits can be made obsolete and the authorization concept can consistently be used.

Cheers,

Julius

Org levels in DEV created but not available in PFCG org drop-downs