Question:
Hi All:
FS00 (Edit G/L Account centrally) is one of the transaction that have all the three option's : display, change, and create in one screen(i.e: FS00) transaction. NOw i have some thing like this:
For position A (role A)i have to give all the authorizations(ie, create, change and display)...and for position B (role B), i have to give only the 'Dispaly' authorization.
In the role definition, when i maintained the authorization data, i had the authorization objects:
1) F_SKA1_AEN : Change authorization for certain fields
2) F_SKA1_BES : Account authorization
3) F_SKA1_BUK : AUthorization for company codes
4) F_SKA1_KTP : Authorization for chart of accounts
Is it possible to grade out (or blank out ) the change and create BUTTONS in the screen for the position B (role B) just leaving the G/L Account No and the company code OPEN for selection purpose( to display). If so what is the authorization object to do that??
I had even done the ST01 trace and looked at SU22 transaction for "C" and "CM". But couldn't find any clue?? or , may be AM i Missing some thing that i need to add??
Your help will be greately appreciated.
Thank's
vp
_________________
Venks
Answer:
You cannot grey out the field/button-options as delivered by SAP with authorization. Since you want to "share" the FS00 transaction you need to configure it in SU24 as the most restrictive(display) and then add the authorization manually to give CReate and/or Change. You can opt to give just the individual tcodes and not FS00.
Answer:
Hi John:
Thanks for the instant reply.
Can you explain in detail with at-least the high level steps that i need to do as i am completely unfamilar with this issue.
Thanks once again.
VP
Answer:
i think john means:
open txn SU24
enter FS00
maintain the auth.fields values and set for each actvt = 03
the data maintained in su24 is used by pfcg to create the profiles. by changing the values to 03 pfcg will only give display acces to a role with FS00 in the menue.... create/change has to be added manuelly.
.....of course you don't need to change this in Su24. Simply edit the 4 authorizations in the role definition and give actvt = 03 (display) only.
Answer:
.....of course you don't need to change this in Su24. Simply edit the 4 authorizations in the role definition and give actvt = 03 (display) only. If you do this the authorization go into changed mode and when you remove the tcode from the menu the authorization will remain... not a good practice. In this case since it is display it is not that critical unless there is a contol concern.
WIth the SU24 change and a manual you can look inthe role and determine you have a SAP Standard supporting the need for the Manual Additions, once the Standard is gone then this would signal you there is a problem and it should be fixed. The documentation onthe text tab helps as well.
Answer:
You cannot grey out the field/button-options as delivered by SAP with authorization. Since you want to "share" the FS00 transaction you need to configure it in SU24 as the most restrictive(display) and then add the authorization manually to give CReate and/or Change. You can opt to give just the individual tcodes and not FS00.
Dr. Jarboe is correct, you cannot gray out field/button operations with authorizations but SAP does have a rather robust transaction variant option that you can use to present a slightly modified set of screens and menus to users.
Answer:
HI Thanks one and all:
I have done the same ...but i could controll the screen display/change/create properties..and it seems that the four authorization objects that I have mentioned doesn't control these display/create/change .
Even after doin that it is allowing me to go to the change/create mode apart from display.
If posible can you guys go and check it once so that you guys can have a clear picture of what i mean.
Thanks one and all for your quick responses.
VP
Answer:
It works..
Thanks Guys for all you quick responses.
I had a strange problem, when i tried to debug the code , then it started working by iteself.
Answer:
Hi All:
FS00 (Edit G/L Account centrally) is one of the transaction that have all the three option's : display, change, and create in one screen(i.e: FS00) transaction. NOw i have some thing like this:
For position A (role A)i have to give all the authorizations(ie, create, change and display)...and for position B (role B), i have to give only the 'Dispaly' authorization.
In the role definition, when i maintained the authorization data, i had the authorization objects:
1) F_SKA1_AEN : Change authorization for certain fields
2) F_SKA1_BES : Account authorization
3) F_SKA1_BUK : AUthorization for company codes
4) F_SKA1_KTP : Authorization for chart of accounts
Is it possible to grade out (or blank out ) the change and create BUTTONS in the screen for the position B (role B) just leaving the G/L Account No and the company code OPEN for selection purpose( to display). If so what is the authorization object to do that??
I had even done the ST01 trace and looked at SU22 transaction for "C" and "CM". But couldn't find any clue?? or , may be AM i Missing some thing that i need to add??
Your help will be greately appreciated.
Thank's
vp