Authorization object not to allow certain user to enter sloc PO

[sitiaishah_abdulfatah]

Dear All,

i have manage to go su21 to create under mm purchasing authorization object called Y_BEST_LOC with Acty and LGORT field. other than that i have insert check item under program RM06ENHI. after that i go to su24 to assign the transaction code check for me21 and me22. under field value for me21, my new object i want to assign value (interval) = $LGORT, but don;t know how so i leave it blank.

Come to user profile i adding this object into the authorization to check, and put in only allow for 0001 and 0002 location. But the user still can save the PO when choose 0004 without error. I want to know missing step that should be done to prevent certain user to order under 0004 storage location.

Kindly suggest and guide me. thanks in advance

Regards

Aishah

[sjeevan · Accepted solution]

ME21/ME21N doesn't even check if the material is extended to the storage location entered in the PO. I don't think what you did is enough to restrict users per storage location, you need to find a user exit or BAdi and do the authorization check in the your custom code

AUTHORITY-CHECK OBJECT 'Y_BEST_LOC'
         ID 'ACTVT' FIELD '01'  "Create
         ID 'LGORT' FIELD '0002'. "Storage Location 0002

IF SY-SUBRC = 0.
 " User has authorization
ELSE.
message 'Not authorized for storage location' type E
ENDIF.

You may have to use the following Business Add-in (TCode SE18)

ME_CHECK_ALL_ITEMS                    :  Run Through Items Again in the Event of Changes in EKKO

[sitiaishah_abdulfatah · Accepted solution]

Hi, tq for reply me. can i put the script in the RM06eNIH1? The only thing is if subrc = 0 i not put this. tcode se18 is not exist in SAP system 40B

[former_member183155 · Accepted solution]

Hi Siti ;

Did you try to add M_BEST_LGO authorization object? Go to SU24 add.

After that, maintain their activity values. But, it is not enough so you need to add this object to role. PFCG tcode can help you or SU01 is a option for maintaining.

Regards.

M.Ozgur Unal

[Former Member]

Hi Aisha,

After Changing the Authorization have you Generated the role once again?

Regards,

Yawar Khan

[sitiaishah_abdulfatah]

Hi,

yes done regenerate but still not permit to change and create

[Former Member]

hi

check is there any user exit or badi can be used.

[sitiaishah_abdulfatah]

Hi tq for reply me. i not sure how to check. i heard on forum use this MM06E005 anf EXIT_SAPMM06E_012. For info SAP system is 4.0B. but not sure.