Authorisations for BBPMAININT

[former_member532485]

I am currently facing an authorisations issue with transaction BBPMAININT. Our SRM 5 system will be shared by many countries and we decentralise vendor maintenance.

Currently we have only one location that is live and the project for a number of locations is on going.

When testing the roles for the the project sites i noticed that we cannot prevent one site from maintaining the data of another site in tcode BBPMAININT. I performed an authorisation trace and it appears there is no authorisation object that is checked that allows control on P Org level.

Has anyone experienced this issue before and if so, how did you resolve it?

Thanks,

Mark

[peter_novoth]

Hi Mark,

I made also a trace:

...
Object           Text                                                                                
S_TCODE    RC=0  TCD=BBPMAININT;                                                   
BBP_FUNCT  RC=0  BBP_FUNCT=CR_COMPANY;                                             
PLOG       RC=0  PPFCODE=DISP;PLVAR=01;OTYPE=US;INFOTYP=1222;SUBTYP=0020;ISTAT= ;  
PLOG       RC=0  PPFCODE=DISP;PLVAR=01;OTYPE=US;INFOTYP=1001;SUBTYP=A490;ISTAT= ;  
PLOG       RC=0  PPFCODE=DISP;PLVAR=01;OTYPE=US;INFOTYP=5500;SUBTYP= ;ISTAT= ;     
PLOG       RC=0  PPFCODE=DISP;PLVAR=01;OTYPE=US;INFOTYP=5501;SUBTYP= ;ISTAT= ;     
PLOG       RC=0  PPFCODE=DISP;PLVAR=01;OTYPE=US;INFOTYP=5502;SUBTYP= ;ISTAT= ;     
PLOG       RC=0  PPFCODE=DISP;PLVAR=01;OTYPE=US;INFOTYP=5503;SUBTYP= ;ISTAT= ;     
...

Please check the PLOG, INFOTYP=5500.

Regards,

Peter

[former_member532485]

Hi Peter,

I noticed PLOG in my original investigation but am not very familar with PLOG and the various different Info types as I have not done much with HR auth objects before.

What is the significance of Info type 5500? What does it allow you to to control?

Thanks,

Mark

[former_member183819]

Hi

hrp5500 table :- company code/ purchase organisation and purchase group.

regards

muthu

[peter_novoth]

Hi Mark,

please see the explanation above from Muthu for details.

In addition for this in general I would suggest always to take a standard role like SAP_EC_BBP_ADMINISTRATOR_LIGHT or SAP_EC_BBP_ADMINISTRATOR, and change it in smaller steps.

After each change check the access of the administrator.

Regards,

Peter