VK33 company code restriction

[Former Member]

Hi -

I've derived a child role with company code A and maintained the new org values in the child role. When the user is doing a negative testing, she was able to display data for company code B along with company code A. This occured for transaction VK33.

Any idea how to restrict VK33 @ company code level?

[Former Member]

Hi -

I've derived a child role with company code A and maintained the new org values in the child role. When the user is doing a negative testing, she was able to display data for company code B along with company code A. This occured for transaction VK33.

Any idea how to restrict VK33 @ company code level?

[Former Member]

When you derived a child role from the parent, child role does not inherit the organizational values. It is unlikely that the child role will has company A

[Former Member]

Hi

She might be getting access to the other company code value B with some other SAP role which is assigned to her earlier.

Please check her profile completely

[Former Member]

Dear Reel,

I hope as per the default SAP settings in SU24 for VK33, the system will not check for Company Code level for authorization.

Let me know if I am wrong.

Regards,

[Former Member]

Yes, Lakshmi is correct..

VK33 access will be execued against to the sales org value not company code value.

V_KOND_VEA

V_KONH_VKO

V_KONH_VKS

The above three objecst are checked against VK33 access .

V_KONH_VKO is having sales org field which is checking for sales org value.

[Former Member]

Check the particular User full authorization user may have company code B some where (Some other role), restrict that first

[Former Member]

Hi,

As I checked in my client system, there were no authorization objects except S_TCODE was assigned to tcode VK33 (Condition Maintenance: Display). However I performed a check on source code to see the authorization check statements. It has shown only the below objects.

S_TCODE

V_KONH_VKS Condition: Authorization for Condition Types

hence restriction on company code level is not possible until unless you develop a custom transaction or source code modification.

Regards,

Gowrinadh

[Former Member]

Hello,

Please check the role again,you might has given more access intead restrciting for company code level

Thanks,

prasant

[jurjen_heeck]

> Please check the role again,you might has given more access intead restrciting for company code level

Previous posts in this thread indicate that company code is not checked for this transaction so re-checking the role is useless.

[Former Member]

This message was moderated.