Authorization for LIFNR?

[Former Member]

is there a authorization object with one of the field as LIFNR? we need to check authorizations based on vendor code. pls its urgent.

[Former Member]

I did not get u.

But there is field called BEGRU(Authorization group) in LFA1.Using that u can find Authorization object from table TBRG(Authorization groups).

Hope this helps.

Regards

[Former Member]

thank you

i need LIFNR in the authorithy check

i am looking for something like this

    AUTHORITY-CHECK   OBJECT   'XXXXXXXXXXX'
                      ID       <b>'LIFNR' FIELD w_lifnr</b>
                      ID       'ACTVT' FIELD '03'.

[Former Member]

I don't think so. I think these are the available ones:

F_LFA1_AEN Vendor: Change Authorization for Certain Fields
F_LFA1_APP Vendor: Application Authorization              
F_LFA1_BEK Vendor: Account Authorization                  
F_LFA1_BUK Vendor: Authorization for Company Codes        
F_LFA1_GEN Vendor: Central Data                           

Rob

[former_member480923]

Hi,

Try this authorization objects:

F_LFA1_BEK FI Vendor: Account Authorization

F_LFA1_BUK FI Vendor: Authorization for Company Codes

<b>F_LFA1_GEN</b> FI Vendor: Central Data

F_LFA1_GRP FI Vendor: Account Group Authorization

M_LFM1_EKO MM_E Purchasing Organization in Vendor Master Record

M_LIBE_EKO MM_E Vendor Evaluation

The code could be like this

AUTHORITY-CHECK   OBJECT   'F_LFA1_GEN'
                      ID       'LIFNR' FIELD w_lifnr
                      ID       'ACTVT' FIELD '03'.

Hope this Helps

Anirban

[Former Member]

hello

thankyou. there is no LIFNR field in the authorization objects mentioned above. pls check.

[former_member480923]

Sorry,

You are right, i missed that one.

Thanks

Anirban

[Former Member]

Heng,

Although you have not stated exactly what you are trying to restrict by using the vendor code LIFNR, as far as I know there is no auth object which will allow you to do this. SAP does provide functionality to check vendors by group as defined by the following objects, hope this helps;

F_LFA1_GRP - Vendor: Account Group Authorization. This allows the restriction of access to the account groups defined for vendors when they are created and as found in table LFA1-KTOKK, however, to restrict the access this way, all vendors must be defined in an account group. If a vendor is not in an account group then SAP will pass any changes against that vendor. Examples of Account Groups are;

INCO – Intercompany

EMP – Employee

KRED – Vendor

F_LFA1_BEK - Vendor: Account Authorization. This authorisation object allows further restriction on the vendor master records for which confirmation can be performed. This is a configurable field as found in the Account Control section of the Control screen in the vendor master record. If a value is maintained in this field then any t_code which checks this auth object would need to have that value maintained in it’s role before it will be able to perform actions on that vendor master record.

BTW these are authorisation checks valid for system 4.6c.

regards DJ