Authorisation combined with document type, activity and status

[Former Member]

I want to create a role for a user who is only allowed to create and change document type ZDI in status IW .

Which object authorization can provided this check ?

The object authorization C_DRAW_TCD control only the activity (create/modify) and the document type (ZDI).

The object authorization C_DRAW_STA control only the document type (ZDI) and the status of the document (IW).

But I need the combination of the both authorization. Does a possibility exist in standard to do it without create a client new authorisation?

Thanks in advance for your help.

Amande

[Former Member]

Hi Amande,

While creating role,you need to give the values of these objects in perticular role.

Examle: if you ask for C_DRAW_TCD , maintain activity here and C_DRAW_STA ,maintain IW here C_DRAW_DOK,maintain document type here.

You need help of basis person and use all these objects while creating role and your problem will get resolved.

Hope this will resolve the query.

Regards,

Ravindra

,

[Former Member]

Hi There

You can use Authorization Object C_DRAW_TCS (Status Dependent Authorization)

It helps you combine Doc. Type and Status

With 3 parameters: activity, doc. type, status I think you'll be able to solve your problem.

Best Regards

An NLP

[Former Member]

Thanks for your response.

But it doesn't works as I want.

The object authorisation C_DRAW_TCS is checked before the save but not after save with the changed values.

for example :

the user has the following authorizations in the modification role:

C_DRAW_TCS activity 02 document type ZDI document status IW

C_DRAW_TCD document type ZDI activity 02

C_DRAW_STA document type ZDI status IW

The user has also the autorisation C_DRAW_STA document type ZDI status FI in the display role

With this configuration the user can modify the document ZDI in status IW and change the status into FI . I don't want that the user can change the status into FI. Does exist a possibility to avoid this?

Of course, after storing this change of the status , the user can't access to the document ZDI with status FI.

SAP doesn't check the authorization C_DRAW_TCS activity 02 document type ZDI document status FI after status change.

Thanks in advance

Amande