Question:
Hi experts,
In our company, sales persons are allowed to display article master (material) record, but the standard cost (MBEW-STPRS) is banned for them to display.
I could locate the specific activity group and the authorization object should be M_MATE_MAT. However, how can I set to create authorization group BEGRU so that only the MBEW-STPRS could not be displayed for the activity group? I found there isn't any selection in table field MARA-BEGRU.
I'm fresh in setting up SAP Security and forgive my silly question.
Best regards,
Green Green.
Answer:
You can enter any value in the auth group field in a material master (basic data) MARA-BEGRU. The auth group doesn't have to already exist, so you don't need to have already created it anywhere.
When you enter an auth group in a material master, the system requires the user to have a value in auth obj M_MATE_MAT in order for them to work with the material.
EG if you enter an auth group of 1234 in a material master, you must have M_MATE_MAT - Activity 02, Auth Group 1234 in your auths to be able to change the material.
If you don't have a suitable value for M_MATE_MAT, the system tells you you are not authorised on the selection screen, so you don't see any material master views.
This is all the object does.
Answer:
Table TBRG has the ability to pre-define authorization groups by authorization objects but SAP didn't enforce any development standards on its use so only a few places will have a popup for authorization group.
Answer:
Dear Ket,
Thanks for your quick response.
In our company, there are more than 130K material master records. If my understanding of your suggestion is correct, you mean if I want all my company's salesperson not be able to see the standard cost of material, I need to create authorization group, say, "1234" into ALL the 130K materials master records before I can set the authorization objects M_MATE_MAT - Activity 01, 02 or 03 ?
And for subsequent created materials or article in the material master, I need to set this MARA_BEGRU a mandatory field to ensure they all under the same authorization control?
But my question is just want to restrict a field MBEW-STPAS (standard Price in Accounting View) to be seen by a certain group of person, not the whole view?
Regards,
Green Green
Answer:
Dear Experts,
Any input on this issue is highly appreciated.
Regards,
Green Green
Answer:
M_MATE_MAT allows access to work with a material (all views).
If you just want to restrict access to field standard price (STPRS?), you could either - not grant access to the costing view & accounting view (B & G) or see if there's a user exit to build in an additional check.
You can also configure the material master's screens to display only certain fields.
Answer:
Dear ket,
You are so nice to reply me so soon.
If I wanted to block users from clicking the Accounting Views, could you tell me where can I find the authorization object for that?
I can't find any description of authorization object about "costing & accounting", or B&G.
Really appreciate for your great helps.
Answer:
You may do it in a simplier way by checking authorization object in field exit that you created.
Answer:
Dear ket,
You are so nice to reply me so soon.
If I wanted to block users from clicking the Accounting Views, could you tell me where can I find the authorization object for that?
I can't find any description of authorization object about "costing & accounting", or B&G.
Really appreciate for your great helps.
Access to material master views is controlled by auth object
M_MATE_STA <OBJ> Material master: maintenance status
Views
A Work scheduling
B Accounting
C Classification
D MRP
E Purchasing
F Production resources/tools
G Costing
K Basic data
L Storage
P Forecasting
Q Quality management
S Warehouse management
V Sales
X Plant stocks
Z Storage location stocks