Question:
Hi SAP gurus,
I need to limit post/park authority per document type. How can i do this? Or if possible, limit posting/parking authority to specific tcode, is this possible?
Thank you so much for any feedback!
Regards,
Clint
Answer:
The is an authorization object for posting by document type called F_BKPF_BLA. Does this have activity code 77? When you apply an authorization group to a specific document type in configuration is this object with this activuty code checked when parking a document?
If the answer is yes then you can do what you are asking for but it works simplest when you want to prvent someone from parking a document type. If you decide you want most document tyoes to be parked but only some to be posted, then you have to put an authorization group on every document type -- not a fun thing.
Remember this: If you control anything on document type you run the risk of someone just choosing another document type to post with. This may make a bigger has of things than you really want. In general using authorization groups on document types should be done sparingly if at all, right Mr. Jarboe?
_________________
bwSecurity
Answer:
if i look in su22 for FV50 ( Park ) I don't see the F_BKPF_BLA...is it possible to add it ?
Answer:
SU22 has nothing to do with whether it is checked or not. If you want to test this add an authorization group to a document type and then try to park a document that uses this document type while either executing a trace or using a test id that doesn't have an authorization for F_BKPF_BLA. If you don't add an authorization group to the document type you will not have tested this properly.
_________________
bwSecurity
Answer:
In General Auth groups are all or nothing, meaning they need to be on all document types, customers , vendors etc. or there is little control. There are a few cases where you can define a scenario where you want to exclude and all else is ok where only one they of object needs an auth group.
Remeber SAP does not care about Parked documents, They cary no value to SAP, they do not enter the financials and VERY little validation is done. It is a scratch peice of paper to SAP. The likelyhood of controlling on doc type for parking will be slim but as bwsecurity posted, you need to add a auth group to a doc type and run a ST01 trace to see. As I recall only F_BKPF_BUK activity 77 will be checked, but it has been a while.
_________________
John A. Jarboe