06-06-2009 11:46 AM
Hi Experts,
One user has authorization to Plant - X which is not assigned to user in VF03 TCode.
When we checked VF03 TCode is not calling Plant Org. Level itself.
There is any way to restrict this?
How can a user have authorization to work on cross-plant which is not required by VF03 Tcode ?Whether it can be possible by any other Org. levels?
Note : User is having VF03 Tcode in Role 1.Plant - X is present in Role 2 which is assigned to him.So the user can able to post in Plant - X?
Kindly help me to solve the problem.
Regards,
Karthika
06-07-2009 8:14 PM
How do you came to know the usage of "Plant" here? Did you check the Authorization trace? If not, please check the full trace (ST01) for all operations of VF03. Find out the object (if really there). Check whether any such object has been added manually by mistake.
Regards,
Dipanjan
06-15-2009 12:06 PM
HI,
Please check whether VF03 is looking for Plant (WERKS) or Sales Org (VKORG). I think it should look for the latter i.e. VKORG. If its looks for VKORG then restrict using that. It is wont suffice if it is controlled via Plant or WERKS. Please check first via Trace what the transaction is looking for. It should be Sale Org and control with that.
Regards
Aveek.