FPE2 - how can we control the access on FPE2 with document type ?

[Former Member]

Hello

We are deploying the deposit requests' functionality (SAP FICA). On this project, one of the requirement is that Sales Department should be able to change the Net Due Date of the account document (document with type GA). It's required that :

1) Sales Department should be able to change only this date and nothing else. I've managed to respect this requirement by defining one new authorization group for the object F_KKKO_AEN

2) Sales Department should have access only on document with type GA and not other ones. That is to say they should be able to change Net Due Date only for GA documents and not for other ones. This is the requirement with which I have some difficultie. I have not found any authorization object which can be used to do this restriction.  I have found the object F_BKPF_BL, but it seems it's not used in FICA. Does someone know what I can do to respect this requirement ?

Thanks a lot for your help

Best regards

Vincent RAIMBAUX

[AmlanBanerjee]

Hi Vincent,

There is one authorisation object, I_VVKK_BLA, in Industry Solutions which does the same actiivty as auth object, F_BKPF_BLA does.

This authorisation object, I_VVKK_BLA checks whether the user is authorized for making changes in the document. This authorization object is also checked for 'Display document' and  entering document type during manual posting.

However, this fall under the class IS_I (Industry Solution-Insurance).

If you are using the Insurance application area, then there are no issues...However, if you are using any other application area, I think you have to make a customised auth object for your requirment by copying the standard.

Hope it helps..

Thanks,

Amlan

[Former Member]

Thanks Amlan for your reply.

Unfortunately, we have the solution IS_I, but we have IS_U (SAP for Utilities).

You advise me to create a customized authorization object, but, sorry, I will need some more elements because I'm not used doing such actions. Can you please tell me the major steps to do ?

Thanks a lot

Vincent

[AmlanBanerjee]

Hi,

Some of the major steps to create a custom Authorization object are as follows-

(a) T.code SU20 - Creation of new authorization field

(b) T.code SU21 - Creation of  a New Auth object in transaction field (BLART, ACTVT and TCOD)

(c) T.code SU24 - Insert of new authorization field e check indicator (green)

(d) T.code SU22 - Check indicator (green)

Once you have completed the above steps, create a new role with transaction PFCG and add transaction FPE2; the new authorisation object

I would recommend you to get in touch with your BASIS person (System Adimistrator) for the creation of this custom auth object and its assignment to transaction FPE2.

Hope it helps...

Thanks,

Amlan