SAP security - changing check maintain setting for security objects

[Former Member]

I am trying to change the check maintain indicator for a couple of transactions

to alow me to manage access based on security objects that are not currently defined as check maintain. Specifically, I have updated the check indicator

(using SU24) to check maintain for object c_stue_ber on transactions MD11 and MD12 (planned order create/change). The transactions still do not check this object as expected. Does anything else need to be done to enable checking an

object that is not set up as check maintain originally?

Any help is appreciated.

Thanks,

Doug Scott

[Former Member]

We have the same requirement to restrict displaying BOM components in MD11, CO03, etc...

Sounds like object C_STUE_BER does not work to prevent displaying BOM Component lists in these transactions....

Is there any other solutions?

[Former Member]

C_stue_ber only controls programs that read the BOM tables i.e. MAST, STPO, etc.  MD03 and CS03 read the RESB table for component information.  The only way we
control MD03 and CS03 is by restricting the transaction to a given SAP plant using M_PLAF_ORG..  You could look at user exits for MM03 and CS03 and control with code if needed.   Also be aware that displaying cost estimates on MM03 costing 2 tab also displays bom information, so we also restrict M-MATE_STA for views B and G to prevent this access.