Question:
Dear Sir or Madam:
We are experiencing following problems in our SAP 4.6 C setup.
1.We want to restrict our users to post entries in typical profit
centres. In other words users should be able to post entries to only
those profit centres of which authorisations are given to them. For
e.g. in our setup we have defined profit centre RT0101 and RT0351. We
have given authorisation of RT0351 to one user. And during testing we
have found that the same user is also able to post entry in the RT0101
profit centre. As mentioned we want to restrict users to post entries
only in those profit centre whose authorisations are given to them.
2.For our authorisation purpose we have defined / created roles by
putting transaction codes in it (with the help of PFCG). While creating
role/s we have put only transaction codes in it. In-spite of that our
users are getting access to surplus transaction codes. These
transaction codes are – FSS0, F.05, F.16, F.90, and F.91. When we have
observed this problem that time we searched for these transaction codes
in the profile. But found that these mentioned transaction codes are
not there in the profile/role. And in-spite of that users are getting
access to it.
I hope above mentioned details are will give you an enough idea of our
problem.
It is our kind urge that please take this matter on priority and give
us the solution as soon as possible.
Thanking You,
Best Regards,
Asad Rizvi,
Technical Consultant,
India.
Answer:
asad,
just a quick idea. have you checked the user master to make sure the user in question doesnt have other roles/profile assigned to him/her that would give them the extra auth needed.
dave.
Answer:
Financial Postings are not controlled on cost center or profit center as delivered by SAP. the thinking is:
1. Security is not used to allow abdication of a person's responsibility. _ Profit center stewards are to manage their cost and have adjustments made if in error. If the error continues it is a training issue, again not cured be security.
2. SAP does not care how you split the dime you already spent. Profit centers and cost centers allow you to put cost in a bucket to report fromm , in reality it has little to do with PURE accounting.
SO you my have to look for a user exit if you insist on controlling to profit center.
Answer:
If anyone knows of this user exit can they post the name of it? I've seen a couple posts mention it, but I can't find and exit that does this type of check. Thanks!
Answer:
You will not find one that says "here is an auhtorization check user exit you can add checks on PRofit Center",
You have to look at all the ones available ( SMOD and BF03) and see if one of them, if it exists, will work for you.
Answer:
it depends on the module applied.
To honestly control the profit centre that is not delivered by SAP, however, if you can tell me what sort of module implemented maybe i can help.
Regards