I am facing some problem while giving authorizations for a T-CODE FBL3N & F-02 the problem is there are 4 BUSINESS AREA to be defined out of which only 2 Business area are to be given in a particular USER ID the authoirzation object for business area is F_BKPF_GSB i have restricetd it to only 2 business areas and in the 'ACTIVITY GROUP' i have given the rights for CREATE , CHANGE , GENERATE , PRE-ENTER now when the user enters the T-CODE F-02 he is able to enter all the 4 business areas although the login id has been restricted to only 2 business areas . Can someone help?