Skip to Content
0

SAP Security - Restrict access within VF01 & VF02

Sep 22, 2017 at 04:44 AM

121

avatar image
Former Member

We have a peculiar situation where we have multiple locations which all fall under the same company code, Sales Organisation & Distribution Channel. The only things that is different is the plant number. Can anyone let me know how to restrict users from creating/editing billing via VF01 & VF02 in this scenario. All the related authorisation objects maintained in SU24 are company code or sales org related. The roles are created plant wise but then that does not restrict user and they are able to edit/create any billing doc.

Can someone suggest a solution for the same.

10 |10000 characters needed characters left characters exceeded

Probably I failed to understand some company specifics, but what difference does it make if a billing document is created via a background job (the way it is typically done in companies) and if it is generated by a certain dialog user?

After all, the order was approved, the truck was loaded with products, goods issue has been posted...

0
* Please Login or Register to Answer, Follow or Comment.

4 Answers

avatar image
Former Member Sep 29, 2017 at 06:13 AM
-1

Hi,

create a Z tcode for VF01 & VF02 which contains plant no. also and then we can stop uses from creating anything to other plants.

Share
10 |10000 characters needed characters left characters exceeded
Siva Prasad Vasireddy Sep 22, 2017 at 06:23 AM
0

Hi,

you can either use authorization Object - S_TABU_DIS

or

you go with Z authorization Object and assign for the User Roles which controls the Plant restrictions.This can be done by Abaper.

Show 1 Share
10 |10000 characters needed characters left characters exceeded
Former Member

How will S_TABU_DIS work . Can you please explain because we can great group of the tables involved but how to restrict plants in them .

Also can you explain how "you go with Z authorization Object and assign for the User Roles which controls the Plant restrictions.This can be done by Abaper."

0
Ram Shanker Sep 25, 2017 at 06:27 AM
0

Hi

You have to create/define Implicit Enhancement after enter of Delivery No in VF01/02. After this you can check that user to related with that plant or not. It will work.

Thanks!

Ram

Share
10 |10000 characters needed characters left characters exceeded
Shane Kelly Sep 25, 2017 at 07:51 PM
0

we do this blocking at the Purchase and Sales Order transactions - In our case i don't want them creating orders for those plants. Stop it before it even gets to invoicing. Maybe that would work better?

Share
10 |10000 characters needed characters left characters exceeded