Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

V_KONH_VKS authorization object (for condition types) is not working

Former Member
0 Kudos

Hi all,

I want to restrict the condition types through the authorization object V_KONH_VKS.

But if i assign or wont assign this authorization object,user is having full access for the condition types.The authorization object is not effecting.

Checked the trace for that user id also. in that trace log, its not looking for this object while editing the condition types. We are using the condition types which are customized.

User is authorized for the tcodes VA21,VA22,VA23 only.

He doesn't have any other role.

What i was observed is, if any user having following authorizations that user id able to change the amount of the any condition type.

V_VBAK_VKO with activity 02

V_VBAK_AAT with activity 02

ST01 trace is passing only the above objects to change the amount of any condition type.

and the user id doesn't have authorization for the object V_KONH_VKS.Then also the is able to edit that.

My support pack level is SAPKH47028.

And i had checked 562757 and 771060,429515 etc, ( as per Sunil Bujade's suggestion in SAP NetWeaver Administrator form )

But i didn't find any note which is suitable for my sap version and sp level for this issue.

Currently i am not able to restrict the condition types through the object V_KONH_VKS

Please tell me why i am not able to control the authorization for the condition types.

4.7E, SQL 2000, Win 2003

Regards,

Gayathry.

8 REPLIES 8

Former Member
0 Kudos

Hi,

Look in transaction SU24 with the va21 en you see that both of the objects you mention will not be checked. It means that it is not programmed and that if you want to use these objects you have to do some abap, perhaps in a user exit. That you have to talk over with your abap fellow or girl.

have fun

Bye Jan van Roest

Former Member
0 Kudos

Hi Gayatry,

>

> I want to restrict the condition types through the authorization object V_KONH_VKS.

> But if i assign or wont assign this authorization object,user is having full access for the condition types.The authorization object is not effecting.

> Checked the trace for that user id also. in that trace log, its not looking for this object while editing the condition types. We are using the condition types which are customized.

Lets get some things clear.....dont mix 2 things together...

Creating / maintaning a Quotation is completely different from creating/maintaining a condition! Maintaning or creating a quotation includes assignment of condition types for pricing. Its a SOX conflict if the users can maintain a condition and a Quotation / Sales Order.

Maintaining condition is controlled by V_KONH_VKS through VK11, VK12.

> User is authorized for the tcodes VA21,VA22,VA23 only

Good. Dont give the same user access to VK11, VK12

> He doesn't have any other role.

> What i was observed is, if any user having following authorizations that user id able to change the amount of the any condition type.

> V_VBAK_VKO with activity 02

> V_VBAK_AAT with activity 02

>

> ST01 trace is passing only the above objects to change the amount of any condition type.

> and the user id doesn't have authorization for the object V_KONH_VKS.Then also the is able to edit that.

> My support pack level is SAPKH47028.

> And i had checked 562757 and 771060,429515 etc, ( as per Sunil Bujade's suggestion in SAP NetWeaver Administrator form )

Do you mean VA21 is giving them access to change Condition types too? I have never come across this.

This seems interesting. Via this transaction, they should not be able to do this. SAP will not allow it.

Sorry for asking this again like a stupid person, however, I am actually still unclear on your question...you meant access to change condition types in a quotation or access to limit the assignment of custom condition types in a quotation ?

Also, in production (or the system this is happening) , what is the SU24 for VA21 for V_KONH_VKS? The SAP default is 'N' for 4.7E

Thank you

Abhishek

0 Kudos

HI Abhishek,

I will try to explain my issue with some example ...

First of all, the issue is not pertaining to restrict user from maintaining condition record in VK11/VK12.

The issue is to restrict some specific users to change the condition types in VA22.(change quotation)----


In VA22 some condition types we can enter manually in the condition tab.Let us take one example.. One user A created one quotation through VA21, here user A entered one condition type ZSSW(discountwhich is manual entry activated- suppose value is 5%, this percentage will be entered manually in VA21 and can be changed in VA22) then in VA22 suppose only user C can change this ZSSW value, no other user other than C can change it (not even user A)for all other user this condition type should appear as grayed out in VA22 condition tab page.

I created one user ABCD for testing purpose. and he is authorized to VA21,VA22,VA23 only.

I want to check with this user ABCD he should not be able to change value of ZSSW condition in VA22 condition tab but he should be able to change other things and condition types values for which manual entry is possible(other than ZSSW) in VA22.

But through VA22 he is able to change that ZSSW condition value also..which is not desired by us.

Regards.

Gayatry.

0 Kudos

Hmm........interesting..... Let me check this when I get a system....

till then enjoy your weekend

thank you

Abhishek

0 Kudos

Hi Abhishek..... waiting for your suggestion !

Former Member
0 Kudos

we are not able to resolve at authorization level, resolved by Abaper.

0 Kudos

Hello Gayatri,

Although you have marked the question as answered, I wanted to add to your query. The objects that control the authorization for condition types in sales documents are:

V_KONH_VKO Condition: Authorization for Sales Organizations

V_KONH_VKS Condition: Authorization for Condition Types

In addition, you may have to maintain the authorization object V_KONH_VKO (controls conditions within specific sales areas) and V_KONG_VWE (controls the generation of condition tables).

Here you can restrict condition maintenance in pricing using these objects. These objects have been set to do not check in standard SAP in SU24 for VA21 & VA22 ( I have not checked the rest). Haveyou checked the SU24 settings for the transactions you have mentioned?

I think this could have been restricted via security settings itself.

regards,

Subbu

0 Kudos

Hi Gayathri,

I have a similar kind of Requirement where we need to restrict a particular user to enter a Condition Type in Quotation, as u had a similar Requirement can u please tell how it was resolved.

Thanks in Advance

Ameet Singh