Question:
We are trying to restrict user to not to use some Condition Type
while creating Sales Order.
But While creating sales order, it is checking authorisation only for
Tcode, Document type, Sales Organization, Distribution channel & division.
Once we add these objects in a role and assign it to users, User is able to
save the sales order. No Other Checks are there.
Can we manually create any authorisation object to restrict user to not
to use particular Condition Type in sap standard tx-VA01.
Can anyone put light on this.
Regards
PrakashP
Answer:
Authorization object only restrict access ifn the objects are in the code. You can assign all the objects you want and create all the custome ones you want but if it is NOT in the code the user is running they do not get checked.
You can look to see if the tcode you are trying to control MIGHT check the object by looking in SU24 and looking for the object that may control the fields you want ( I do not beleive Condition Type is one) listed for the tcode. IF the objet is listed in the status is checked 'N' then moving the chek to 'C' or 'CM' will cause the the check to start, NOTE just adding an object to the list will NOT start it checking IF the object is NOT in the code.
Your other option is to look for a user exit or a Business partner function (tcode BF03) to add the code to check for condition type.
Answer:
Hi,
You also may test if a field-exit can be used for field condition type in VA01.
Rbezard
Answer:
Field exits are not officially supported after fersion 4.5....
Answer:
Bummer
_________________
Gary Morris
SAP Security Analyst/Developer
garymorris@sapsecurity.net