Question:
Searching has borne no fruit so I hope someone may have an idea...
We have dual control for vendor master configured (all working nicely) but our client has requested that we create roles which will only allow confirmation authorisation for specific fields within specific account type.
For example, for account type EMP, the client wants to segregate ability to confirm bank detail changes from all other sensitive fields.
I thought I could do this by setting up field groups, one for the bank specific fields and one for all the rest but this hasn't worked. I have not found any evidence that this level of specificity is actually possible so if anyone can assist I would be most grateful.
working on v4.6c
_________________
D. James
Answer:
Question re-posted with more information as the original is a bit vague (sorry)
We have dual control for vendor master configured (all working nicely) but our client has requested that we create roles which will only allow confirmation authorisation for specific fields within specific account type.
For example, for account type EMP, the client wants to segregate ability to confirm bank detail changes from all other sensitive fields.
As I could see that auth object F_LFA1_AEN (Change Authorization for Certain Fields) is pulled into the pfcg with t_code FK08 I thought I could achieve this segregation by setting up field groups, so I created two new groups in view V_055G_B and assigned fields to those groups in V_055_B to create the segregation I am looking for.
Unfortunatly this has not worked as I seem only to be able to segregate between General and Central data fields using the auth object F_LFA1_GEN. I’m not sure if I have mis-interpreted the documentation although I have not found any evidence that this level of specificity is actually possible so if anyone can assist I would be most grateful.
D.James
_________________
D. James
Answer:
Your approach is correct.
Did you include all existing fields in your 2 separate groups or just some of them for object F_LFA1_AEN? If some fields are left not assigned to any of these groups then you won't get correct results.