Question:
We need to be able to restrict access to all transactions via specific Company Code.
Scenario: Transaction F-43 (Sundry Accounts Payable)
User has access to Company Code A and Company Code B. Within Company Code A profile has been setup to allow access to F-43. There is no such profile setup in Company Code B. Issue, user is still able to access transaction/complete transaction F-43 for Company B.
We do not want this to occur, the user should not be able to access F-43 under Company Code B.
We currently have 20 + Company Codes and multiple users have access across multiple Company Codes.
Our current security setup is restricted by Business Area/Company Code, however when a user has access to multiple company codes this overrides the Business Area Restriction thus voiding all Business Area Access Controls.
Does anyone else have a similar problem? Any suggestions on how to get around this.
Answer:
Working as designed, Access is not Transaction code specific. If the user has F_BKPF_BUK with a list of company codes then they can perform ANY accounting function prescribed by the activity in the authorization. If you only want create vendor invoice access to Co code A then company code A will have to be the only one in F_BKPF_BUK authorizations activit 01.
Further Business area and Company code are not VALUE Sets in Financial control, they are indipendant, so again it is working as designed....
Answer:
Thanks John. Unfortunately I know all this but was hoping that someone out there may have a similar scenario they have managed to work around.
LouLou