Skip to Content
avatar image
Former Member

V_KONH_VKS authorization object (for condition types) is not working

Hi all,

I want to restrict the condition types through the authorization object V_KONH_VKS.

But if i assign or wont assign this authorization object,user is having full access for the condition types.The authorization object is not effecting.

Checked the trace for that user id also. in that trace log, its not looking for this object while editing the condition types. We are using the condition types which are customized.

User is authorized for the tcodes VA21,VA22,VA23 only.

He doesn't have any other role.

What i was observed is, if any user having following authorizations that user id able to change the amount of the any condition type.

V_VBAK_VKO with activity 02

V_VBAK_AAT with activity 02

ST01 trace is passing only the above objects to change the amount of any condition type.

and the user id doesn't have authorization for the object V_KONH_VKS.Then also the is able to edit that.

My support pack level is SAPKH47028.

And i had checked 562757 and 771060,429515 etc, ( as per Sunil Bujade's suggestion in SAP NetWeaver Administrator form )

But i didn't find any note which is suitable for my sap version and sp level for this issue.

Currently i am not able to restrict the condition types through the object V_KONH_VKS

Please tell me why i am not able to control the authorization for the condition types.

4.7E, SQL 2000, Win 2003

Regards,

Gayathry.

Add comment
10|10000 characters needed characters exceeded

  • Follow
  • Get RSS Feed

3 Answers

  • avatar image
    Former Member
    Oct 30, 2008 at 11:33 AM

    Hi,

    Look in transaction SU24 with the va21 en you see that both of the objects you mention will not be checked. It means that it is not programmed and that if you want to use these objects you have to do some abap, perhaps in a user exit. That you have to talk over with your abap fellow or girl.

    have fun

    Bye Jan van Roest

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Oct 31, 2008 at 12:13 AM

    Hi Gayatry,

    >

    > I want to restrict the condition types through the authorization object V_KONH_VKS.

    > But if i assign or wont assign this authorization object,user is having full access for the condition types.The authorization object is not effecting.

    > Checked the trace for that user id also. in that trace log, its not looking for this object while editing the condition types. We are using the condition types which are customized.

    Lets get some things clear.....dont mix 2 things together... 😊

    Creating / maintaning a Quotation is completely different from creating/maintaining a condition! Maintaning or creating a quotation includes assignment of condition types for pricing. Its a SOX conflict if the users can maintain a condition and a Quotation / Sales Order.

    Maintaining condition is controlled by V_KONH_VKS through VK11, VK12.

    > User is authorized for the tcodes VA21,VA22,VA23 only

    Good. Dont give the same user access to VK11, VK12

    > He doesn't have any other role.

    > What i was observed is, if any user having following authorizations that user id able to change the amount of the any condition type.

    > V_VBAK_VKO with activity 02

    > V_VBAK_AAT with activity 02

    >

    > ST01 trace is passing only the above objects to change the amount of any condition type.

    > and the user id doesn't have authorization for the object V_KONH_VKS.Then also the is able to edit that.

    > My support pack level is SAPKH47028.

    > And i had checked 562757 and 771060,429515 etc, ( as per Sunil Bujade's suggestion in SAP NetWeaver Administrator form )

    Do you mean VA21 is giving them access to change Condition types too? I have never come across this. 😊

    This seems interesting. Via this transaction, they should not be able to do this. SAP will not allow it.

    Sorry for asking this again like a stupid person, however, I am actually still unclear on your question...you meant access to change condition types in a quotation or access to limit the assignment of custom condition types in a quotation ?

    Also, in production (or the system this is happening) , what is the SU24 for VA21 for V_KONH_VKS? The SAP default is 'N' for 4.7E

    Thank you

    Abhishek

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Feb 02, 2009 at 10:36 AM

    we are not able to resolve at authorization level, resolved by Abaper.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi Gayathri,

      I have a similar kind of Requirement where we need to restrict a particular user to enter a Condition Type in Quotation, as u had a similar Requirement can u please tell how it was resolved.

      Thanks in Advance

      Ameet Singh