2008 Nov 12 2:58 AM
I have set parameter ID- KOS (Cost Centre) = A to user Z and hopes that they cannot create or change document for other cost centre except for A Cost Centre. Then I do testing using Z id and try to create PR and GR for other cost centre, nothing block me. It's look my parameter setting is not working. Do I need to maintain anything else besides SU01.
I have set parameter ID- KOS (Cost Centre) = A to user Z and hopes that they cannot create or change document for other cost centre except for A Cost Centre. Then I do testing using Z id and try to create PR and GR for other cost centre, nothing block me. It's look my parameter setting is not working. Do I need to maintain anything else besides SU01.
2008 Nov 12 3:02 AM
parameter id will not prevent users from entering data for other values. it just defaults the value from the id. for actual control you need to use proper authorization object
2008 Nov 12 3:41 AM
Thanks for your answer Mxg..
I have try to create custom authorization object and put into the standard object classes. Then I create role and call up the object but it still not working. Do I need to do anything on SU22 or set the Z authorization object into the transaction code.
2008 Nov 12 3:46 AM
why not leave it to your basis / security person to handle. I dont think you need to create custom object for this one
2008 Nov 12 3:47 AM
yes you need to check now
AUTHORITY-CHECK OBJECT 'ZKNTTP'"zzknttp is my aut object.
ID 'KNTTP' FIELD re_data-KNTTP.
if sy-subrc =0.
message....
endif.this code has to be written in suitable Exit of perticuler transaction.