Authorization Based On Sales Office

[Former Member]

Hello All,

We have 3 Sales offices for different location

hence my organization want to restrict user Based on Sales Office.

No one user  can create sales order for other sales Office.

I have created a role and have assigned transactions to the same

in authorization object i have manually included one object ie  V_VBKA_VKO

I have maintained sales office under VKBUR

generated profile and assigned it to User  but while testing it is not restricting user based on Sales office.

Please check below settings

Manually   Sales Activities: Authoriz.for org.data and sales activ.type V_VBKA_VKO

Activity	01, 02, 03, 24, 25	ACTVT
Sales Activity Type for Sales  *	KTAAR
Division	*	SPART
Sales Office	2101	VKBUR
Sales Group	*	VKGRP
Sales Organization	7001	VKORG
Distribution Channel	*	VTWEG

Do i need to change something please help

Best regards,

Amol Dounde

[Former Member]

Hi,

Can you provide me the transaction which allows the sales office data.

[Former Member]

Transaction For Sales office date

VA01- Sales order Creation

VA02- Sales order Change

VA02- Sales order Display

[Former Member]

Hi,

I checked the above scenario and there is no activation for the authorization object - "V_VBKA_VKO". the above transaction code. ( Check SU24 for the transaction code). The above run with the help of authorization object V_VBAK_VKO. ( especially VKORG - Sales organization ).

The authorization object - V_VBKA_VKO check by transaction code - VC01,VC02,VC03. ( Sales activity).

Let me know if you need any other details and appreciate me if it is helpful.

[Former Member]

Hi,

Yes i have just gone through but i would like to know is there any other way for same activity.

Best Regards

Amol Dounde

[Former Member]

Hi,

Can you activate the authorization object for the transaction code with the help of SU24 and do the same.

Appreciate if it is helps.

[Former Member]

Hi,

I have added but its not working.

Best Regards,

Amol Dounde

[jurjen_heeck]

Silambharasan Murugesan wrote:
Hi,
Can you activate the authorization object for the transaction code with the help of SU24 and do the same.
Appreciate if it is helps.

Just adding checks in SU24 does not help if the corresponding authorization check is not in the ABAP code.

The original requirement needs programming, using a user exit in SAPMV45A as far as I know. I have seen some documentation on this but only in Dutch.

[Former Member]

Hi,

Thanks for your info.

Also please concern this note.( Note how to use SU24 - Note 1395339 - Authorization check: Maintenance of SU24 for transactions )

Anyway i will work on the SU24 and let you know what need to be done and how we will activate the same.

[jurjen_heeck]

That note describes what to do for a transaction where the actual check is in the ABAP code but is disabled in SU24. In such a case you can reactivate it. In the original case it looks as if there is no check for V_VBKA_VKO in VA01, VA02 or VA03. That can not be fixed without additional coding.

To see whether a check is present in the code an ST01 trace is always helpful. Even the disabled checks will appear in a trace, wit RC=0.

Jurjen

[former_member410641]

Hi Friends,

I have gone thrown many threads  related to the this requirement, but could not find name of user exit for the same.

My Requirement is :

In VA01 screen, if user is not authorized for a given sales office or plant then error should be thrown

I have created a custom object having sales office and plant and this object will be called from user exit.

Can some body tell me which user exit can be used for this purpose.?

Thanks and Regards,
Rahul