Auth object for prod orders and MRP Controller

[Former Member]

Hi all. My need is to find or create particular authorization object. It should differentiate production orders by MRP Controller. Say, we have 2 prod orders №1111 and №2222, and they have MRP Controllers №100 and №200 respectively. The goal is that some users should have access to create or edit prod orders with MRP Contr. №100 (prod ord №1111), but not with MRP Contr. №200 (prod ord №2222).

Existing auth field (DISPO) relates only to MRP process, but not to prod orders.

Any ideas how to solve the problem?

[TammyPowlas]

Hi Bill - to try to find it please perform an STAUTHTRACE in your backend system. If it exists, it will appear there. If not, then you know it will need to be created.

[Former Member]

Thanks Tammy.

I've run the tcode and object doesn't appear.

I created cusom auth field and custom auth object, but it doesn't work as desired. I mean, I add it to role, fill it with particular value (for instance MRP Contr. = 100), but system lets the user edit prod orders with other MRP Controllers.

Apparently, system doesn't associate auth field with field on a screen.

Now I need to know how to link them.

[TammyPowlas]

I would work with your ABAP developer to implement the custom authorization object

[Former Member]

Could you please guide me how to do this? Maybe some links or code examples?

[TammyPowlas]

Please search - there are several blogs on this topic that explain it - for example https://blogs.sap.com/2012/08/27/one-custom-authorization-object-for-all/

[Caetano]

Hello Bill

If the statement AUTHORITY-CHECK is not called for this specific authorization object during the program execution, then it will not be checked in the transactions.

The following blog explains how to check if this statement is called during the transaction execution:

https://blogs.sap.com/2014/03/19/how-to-analyze-authorization-issues-in-debug/

If the authorization is not called, then you can implement your own check using BAdI WORKORDER_UPDATE.

Regards,

Caetano