Skip to Content
avatar image
Former Member

Authorization restriction for Goods issue against an Order

Hello All,

We have a situation wherein the user is able to issue goods using tcode MIGO by choosing Goods issue --> Others and mentioning an order number that belongs to another plant in the account assignment tab and issues a material which belongs another plant.

For eg we have material A that has been created for plant 1. The user issues the material (movement type 261)and the account is assigned to an order which has been created for plant 2.

I could not find any authorization object that restricts this.

I checked the objects M_MSEG_BWA and M_MSEG_WWA and he has authorizations only for plant 1 and all movement types.

Any pointers to restrict this access will be appreciated.

Thanks & Regards,

Subramaniam Iyer

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • avatar image
    Former Member
    Oct 17, 2008 at 10:01 AM

    hi,

    Please check the authorization object M_MSEG_WMB. This authorization object is for activities of material documents for specific plant.

    Regards,

    Sneha

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      The user has access for two plants to post goods movements ie. plant 1 & 3. He is not authorised for plant 2. Both the plants are maintained in the role via the org levels button. He has access to all movement types for these two plants through this role. But, that is not the concern right now.

      We need to somehow restrict the user to post goods issues against orders for plant2 for which he is not authorized. The system does not check the authorization neither does it disallow the posting of goods issue using tcode MIGO while using GI others. Is there a solution to the above problem?

  • avatar image
    Former Member
    Oct 19, 2008 at 07:48 AM

    Hi,

    MIGO transaction by default restricted with Plant. If you say that the user A is having access to only Plant 1 & 3, but not for 2, please check the below authorization objects does not have any manual objects inserted into the Role and restricted with the value only in organization field.

    M_MSEG_LGO

    M_MSEG_WMB

    M_MSEG_WWA

    M_MSEG_WWE

    This issue may occur because if the objects are maintained manually in the role. If so, when you check in the organization field, it may not be showing the value which are manually added into the manual object.

    Also, please check the other roles are assigned to the user. If any of the other roles assigned to the user having any of the above objects with * value, this may provide the user to do the Goods movement for any plant.

    To check the issue, please go to SUIM and check the user under "Roles by Complex Selection Criteria" and make sure that you are checking the objects for the particular user. This should be able to identify whether the user is getting access from any other roles assigned to the user.

    Regards

    Anandm

    Add comment
    10|10000 characters needed characters exceeded