Skip to Content
0
Former Member
Jul 27, 2010 at 01:56 PM

Grant activity 10 (post) and block activity 32 (save) in FBCJ

242 Views

Hi,

Control access to the transaction FBCJ through the object F_FBCJ. This object has the following activities:

33 = read

02 = change

32 = save

10 = post

06 = delete

36 = extended maintenance

I created a profile "Test" with permission only on activities 33(read), 02(change) and 10(post). I included a user test this profile using the authorization group according SAP note 502096.

When the test did notice that the user cannot perform the activity 10 (post). As I was informed above the activity 10(post) was granted.

I discovered after tests that the user can use the activity 10(post) only when the activity 32(save) is also provided in his profile. It does not meet my needs, because as rule of the company users should only use the activity 10(post). The activity 32(save) not be granted.

In short, I must grant the activity 10(post) to users without granting the activity 32(save).

Note:

What is most strange is that I can do the opposite, that is, give the activity 32(save) and block the activity 10(post). In this case the restriction works correctly.

Regards,

Andreia Lucena