'Change' authorization when manager raises SC as a requisitionar.

[Former Member]

Hello,

First let me explain the regular functionality.

When a requisitionar (with role SAP_BBP_STAL_EMPLOYEE) orders the shopping cart and the same is gone to manager

( with role SAP_BBP_STAL_MANAGER), the manager can change but employee can not.

i.e. the manager can see the 'change' button under approval for that SC but employee can not.

This we have achieved by setting the security level (BBP_WFL_SECURITY) under PFCG for resp. role.

For role SAP_BBP_STAL_MANAGER = 4

For role SAP_BBP_STAL_EMPLOYEE = 1

Our client is happy with this functionality.

But, now it's desired that when the manager will raise a SC for his own use,

then the manager also must not be allowed to change the SC once ordered or when changed/rejected by his approver.

Please let us know whether this is possible?

If yes, How?

BR

Dinesh

[yann_bouillut · Accepted solution]

Hi Dinesh,

Did you check BBP_WFL_SECUR_BADI ?

Kind regards,

Yann

[Former Member · Accepted solution]

Hi Yann,

I got some direction from yr answer.

But I am not that strong in ABAP.

Can you ellaborate yr answer?

Do we need to insert our own code in BADI?

BR

Dinesh

[yann_bouillut · Accepted solution]

Hi Dinesh,

Yes you have to insert your own code to control to overwrite the standard settings and make the system work as you want.

Kind regards,

Yann

[Former Member · Accepted solution]

Hi Dinesh,

with the BADI BBP_WFL_SECUR_BADI, method SET_SECURITY_LEVEL, you can change the WF security level determined from role personalization.

In input parameters you have the user ID in ACTUAL_USER, the object ID/Type/Guid, the scenario SCENARIO (see possible values in SE11 domain BBP_SC_SCENARIO).

So with the inbound scenario and the user's profiles, you can determine your own security level and overwrite the standard one.

In export parameter, you have the changed security level NEW_SEC_LEVEL.

Rgds

Christophe

[Former Member · Accepted solution]

Hi Christophe,

How do i change the authorisation for a user with role SAP_BBP_STAL_MANAGER when he is an approver and when he is a requisitioner?

How do I change the authorisation.. i mean... based on which input parameter in the SECURITY badi???

BR,

Disha.

[Former Member · Accepted solution]

Disha,

I already detailed the solution in my answer:

Input parameters:

- ACTUAL_USER = user ID --> gets its roles

- SCENARIO = SC is in approval

Export parameter:

- NEW_SEC_LEVEL

Rgds

Christophe