Different authorization for display GL Account between F.01 and FS10N

[Former Member]

Dear Gurus,

currently i have new requirement for authorization related to displaying specific GL Account only (restricted GL Account can't be executed) for specific user.

• i have used authorization group in GL Master Data (F_BKPF_BES-BRGRU)-> it works but applied to all TCode which roles have that authorization object.

But then new requirement comes, that i need to give different authorization while accessing F.01 and FS10N

• in F.01 , users can access all GL Account
• in FS10N, users can access only unrestricted GL Account

My basis and me have tried few testing by maintaining roles but it's locked one to another. I also found another authorizaton object F_SKA1_BES BRGRU related to Auth Group GL Account.

Here some tests we've done:

• Role 1 : TCode F.01, F_SKA1_BES-BRGRU * /// Role 2 : TCode FS10N, F_BKPF_BES-BRGRU ' ' /// Impact for restricted GL Account : both still can access restricted GL Account
• Role 2 : TCode F.01, F_SKA1_BES-BRGRU * /// Role 2 : TCode FS10N, F_BKPF_BES-BRGRU 'X' /// Impact for restricted GL Account : both still can access restricted GL Account

Is there any idea to solve this issue? or any user exit i can use in FS10N for limiting the access to GL account?

Thanks a lot in advance!

Mel