07-22-2009 10:52 AM
Hello,
Can someone please help as I am new to this?
I have added transaction VL06O to a role and I need to restrict this by distribution channel. When I have checked in SU24, there is no authorisation object associated with the transaction that will check for distribution channel. So in SU24, I have added the authorisation object V_VBAK_VKO and set this to Check/maintain, the authorisation object then appears in PFCG and I can add the value for the distribution channel to the organisational levels of that role. However, when I test this, it still does not appear to be doing an authorisation check on the distribution channel and I can view data regardless of what value has been set for distribution channel. Can anyone please offer me some advice on how I can force this authorisation object to be checked?
Thanks.
Leah
07-22-2009 11:15 AM
Adding an object to SU24 changes nothing because the actual AUTHORITY-CHECK statement needs to be present in the ABAP source code. You'll have to search for user-exits in the program where you can have extra checks built in.
07-22-2009 11:18 AM
Hi
Which version of your SAP R/3?
The only one option is customizing the tcode by writing AUTHORITY-CHECK statements in the assoicated ABAP programmes and later same should be maintained in SU24.
07-22-2009 11:29 AM