How to authorization sales office and sales group in VA21 and VA01 t-code

I need to authorization sales office and sales group in va21,va22,va23 and va01, va02, va03 to control users access the sales order.

I found some articles how to resolve this problem.I have created new authorization object Z_VBAK_ VKO, and add these fields to the object: VKORG: Sales Organization, VTWEG:Distribution Channel, SPART: Division, VKBUR:Sales Office, VKGRP: Sales Group, AUART:Sales Document Type, ACTVT:Activity

I have add the object Z_VBAK_VKO to va01, va02, va03 in SU24 translation.

I test the authorization , but fail, va01 and va02 do not check the authorization.

Why? what can i do? please help me .

thanks