SAP Security - Restrict access within VF01 & VF02

[Former Member]

We have a peculiar situation where we have multiple locations which all fall under the same company code, Sales Organisation & Distribution Channel. The only things that is different is the plant number. Can anyone let me know how to restrict users from creating/editing billing via VF01 & VF02 in this scenario. All the related authorisation objects maintained in SU24 are company code or sales org related. The roles are created plant wise but then that does not restrict user and they are able to edit/create any billing doc.

Can someone suggest a solution for the same.

[VeselinaPeykova]

Probably I failed to understand some company specifics, but what difference does it make if a billing document is created via a background job (the way it is typically done in companies) and if it is generated by a certain dialog user?

After all, the order was approved, the truck was loaded with products, goods issue has been posted...

[harsha_artani]

Hi,

create a Z tcode for VF01 & VF02 which contains plant no. also and then we can stop uses from creating anything to other plants.

[shane_kelly2]

we do this blocking at the Purchase and Sales Order transactions - In our case i don't want them creating orders for those plants. Stop it before it even gets to invoicing. Maybe that would work better?

[Former Member]

Hi

You have to create/define Implicit Enhancement after enter of Delivery No in VF01/02. After this you can check that user to related with that plant or not. It will work.

Thanks!

Ram

[siva_vasireddy2]

Hi,

you can either use authorization Object - S_TABU_DIS

or

you go with Z authorization Object and assign for the User Roles which controls the Plant restrictions.This can be done by Abaper.

[Former Member]

How will S_TABU_DIS work . Can you please explain because we can great group of the tables involved but how to restrict plants in them .

Also can you explain how "you go with Z authorization Object and assign for the User Roles which controls the Plant restrictions.This can be done by Abaper."