MSC2N authorization- BEGRU Field

[raju_123]

Hi, business need to provide the authorization to users based on material type to tcode msc2n tcode. maintained begru field (material master basic data 1 view- material authorization group(begru) with value 0001 for material x. A role is created with authorization object M_MATE_CHP and assigned to particular user. but still user can able to acess all batch records of material for which begru field is maintained and also not maintained. please advise how to control same. is there any other way to control the msc2n acces based on material type and plant. thank you.

[JL23]

the function module VB_CHANGE_BATCH

is checking this way:

IF NOT mara-begru IS INITIAL. "N_715695
AUTHORITY-CHECK OBJECT 'M_MATE_CHG'
ID 'ACTVT' FIELD '02'
ID 'BEGRU' FIELD mara-begru.
IF sy-subrc NE 0.
MESSAGE e684(m3) WITH ymcha-charg RAISING no_authority.
ENDIF.

There is no authorization group BEGRU field at plant level (MARC).

[raju_123]

Thanks for the response.

Begru field is at client level (mara table).

do you suggest any code changes in order system to recognise authorization object?

please advise..

[JL23]

Based on the given piece of information I cannot know if the requirement is worth a code change, hence I cannot make a suggestion. This is something that you have to decide inhouse by evaluating the facts. I can just make you aware that other companies with more than 1000 plants do not have to use the BEGRU field and still have a workable authorization concept.