Question:
I have a very peculiar problem. Some users in our company have authorizations for MRBR (Release blocked invoices). However, MRBR does not restrict the authorization at company code level and we have many company codes configured in SAP. Now, a person has (by mistake) released all the blocked invoices.
What can we do in SAP to ensure that he is able to release invoices of his company only. Standard SAP has objects assigned to MRBR which check for Purchasing group and purchasing organizatoin. Is there any way I could restrict the access to company code level? Need help on this issue.
How are other companies handling this issue?
P.S: I am sorry for posting the question in the group again.
Answer:
Please ask developer(ABAPer) to put the user-exit with authorisation check for company code/ plant in the tcode program.
P.S: if i am wrong please correct me