We use MATMAS (MATMAS05) for creating and changing materials and off course MM02. The IDOC may only change materials of a certain material type.
I know that authorization object M_MATE_MAR can be used for that when using transction MM02, however this object is not checked with MATMAS which also changes a material (checked via a trace). Most probably MATMAS does not call trasaction MM02. Anyhow I would expect that MATMAS will hit the same authorization checks, in this case it looks like a backdoor.
Does somebody know this problem and has a cure for that?
By the way: I am not a authorization consultant.