Question:
Well, I'm a noob here to CRM 4.0 and I'm slowly learning that the security objects provided by SAP in this box are infantile at best. Bottom line, for transactions CRMD_BUS2000121 (which is create a sales contract), I want to restrict people from editing the contract validity date after creation, and also the billing plan. I want to allow access to edit the other tabs though...
I'm already starting the process for a custom auth object via a user exit on the fields, but wanted to know if anyone knows of a standard way to do it?
CRM security really stinks. It's an on or off type of structure. Very juvenile. GRRR.
As always, thanks to the community for their input.
_________________
"SOX.. hmm .. Aren't they the baseball teams in Boston and Chicago?"
Kind Regards,
IamEvilHomer
(Wayne)
Answer:
I beleive User exit is the only way. To say CRM security is juvanile is being VERY generoious...
Answer:
Yeah CRM security is a response to the overwhelming reception the authorization concept received in the R/3 model. Tons of experts developed really good role based security for end users..... well.... then again...maybe not.
R/3 has a decent authorization model but the developers of EBP, CRM (and I am guessing here- APO) were clueless about the authorization concept so they went off and invented some other notion. It would work well enough if you implemnted HR and included contractors but now it is all messed up. Any sort of central user administration is a total impossibility because SAP forgot about security when they designed their new dimension products.
Answer:
Yeah CRM security is a response to the overwhelming reception the authorization concept received in the R/3 model. Tons of experts developed really good role based security for end users..... well.... then again...maybe not.
R/3 has a decent authorization model but the developers of EBP, CRM (and I am guessing here- APO) were clueless about the authorization concept so they went off and invented some other notion. It would work well enough if you implemnted HR and included contractors but now it is all messed up. Any sort of central user administration is a total impossibility because SAP forgot about security when they designed their new dimension products.
You are right, APO is also shocking.