post goods issue

[Former Member]

hi,

i want to control the post goods issue case for a user.

For example, the user runs a program and when select one of the records of alv, he clicks on a button

to post goods issue. However he does not have VL02N auth or some movement auth. What i want to know is that

is this user can do post goods issue with another user but logged in with his username or any other way to do that,

like bapi etc? His user will not have the auth for vl02n. But could be able to do post goods issue.

thanks

[Former Member]

hi,

i want to control the post goods issue case for a user.

For example, the user runs a program and when select one of the records of alv, he clicks on a button

to post goods issue. However he does not have VL02N auth or some movement auth. What i want to know is that

is this user can do post goods issue with another user but logged in with his username or any other way to do that,

like bapi etc? His user will not have the auth for vl02n. But could be able to do post goods issue.

thanks

[Former Member]

HI,

In bapi also it will check for Authorization before doing the posting , I dont think there is a way for bypassing the user who doesn't have the authorization. Instead u can give the user the authorization . But one doubt about wat u told the user and the other user i didn't get u ,can u elaborate.

Regards,

Madhukar Shetty

[Former Member]

Hi,

Thanks.

There is a common user that IT uses in some cases and that user has every authorization.

However there are many users that has auths based on departments.

I want the user that he could not do the post goods issue with vl02n but he should be able to do it

through a Z program so that i can control the process -ie. when to do the post goods issue.

He will be able to select a record on alv and click on a button to run the vl02n-post goods...

But when he knows that he has vl02n auth, he may not use the Z program however he must use it for other processes.

So i want to do it without assigning the vl02n auth but he should be do the post goods.

Thanks.

[Former Member]

So, you're trying to write a program to evade SAP security? Sounds like a VERY bad idea, and a career-ender to me.

[Former Member]

Hi,

thank for reply firstly.

but you are wrong.

I have done it.

User has the all auths,about vl02n, but firstly i have prevented him/her in code, user exit MV50AFZ1, by username.

Then i have exported the calling program name,i have called vl02n in a batch to do post goods issue, and in this program i have exported Z program name.

Again in mv50afz1 i have imported program name and controlled by this way,calling program name.

So if user tries to use vl02n directly, he will not be able to do it. But if he uses Z program to do it, he can do, if some other data controls are also ok in Z program.

Thanks.

[brad_bohn]

He wasn't 'wrong' - he just said it's a bad idea. It makes no sense that a user does not have authority to do a PGI directly but he/she can jsut jump on over to a Z-transaction/program and do it anyway. What's the point then? Just give them PGI access...