SU24 - add auhorization objects

[Former Member]

Hi experts,

I need an authorization check on the level of "sales group" (VKGRP) in some SD transactions (for example in VA05).

I tried it with object V_VBKA_VKO and i added the object to transaction VA05, using SU24.

Then I created a new role with the requested authorization on Object V_VBKA_VKO. Unfortunately the tests are nagative - the authorization trace shows, that V_VBKA_VKO is not checked while processing the transaction and the user sill can see all customer data.I also checked the customer tables usobx_c and usobt_c, the values are ok.

What ist my mistake, can somebody help me?

Thanks & regards,

Mirjam

[Former Member]

Hi experts,

I need an authorization check on the level of "sales group" (VKGRP) in some SD transactions (for example in VA05).

I tried it with object V_VBKA_VKO and i added the object to transaction VA05, using SU24.

Then I created a new role with the requested authorization on Object V_VBKA_VKO. Unfortunately the tests are nagative - the authorization trace shows, that V_VBKA_VKO is not checked while processing the transaction and the user sill can see all customer data.I also checked the customer tables usobx_c and usobt_c, the values are ok.

What ist my mistake, can somebody help me?

Thanks & regards,

Mirjam

[Bernhard_SAP]

Hello,

you need to trigger the authority-check in the coding of the applicaiton.

Try the search for instance for 'authority-check' - this will give you some mopre useful hints.

b.rgds, Bernhard

[koehntopp]

Plain & simple: if the ABAP code for VA05 does not check for V_VBKA_VKO, adding to SU24 will not change that.

SU24 only affects the checks for objects that already are in the code.

Frank.