Problem in authorization to post goods movement

Dear SAP experts,

I have a problem in authorization for goods movement (migo) transaction.

There are some users in my client that authorized for goods movement transaction (migo) in more than one company codes, but with totally different role.

User A --> in company code 0001 should only be able to display material document.

in company code 0002 should be able to post GR movement types.

For above purpose, I've created 2 different SAP roles:

First role:

Org Level: company code 0001, and assigned with auth. object M_MSEG_BWA with activity display only ( movement type: '*' )

Second role:

Org Level: company code 0002, and assigned with auth. object M_MSEG_BWA with activity create (GR movement types)

The result is unexpected. As the result, user A can post GR in both company code (0001 and 0002).

Could anybody please advise?

Is there any possibility to assign both roles to a single user account, but the requirement (display only in ccode 0001 and GR post in ccode 0002) should be fulfilled? Please advise.

Thanks before.

-rumata-

Edited by: Rumata on May 21, 2008 10:29 AM