Question:
Please shed some lights in the following issue/problem we are having:
1. We have configured OB52 with Authorization Group (F_BKPF_BUP) Z001 assigned to users A, B, C.
2. User D also has this role assigned to him but in INACTIVE mode.
3. Settings of OB52:
Var A Fr To acct FrPer1 ToPer1 FrPer2 ToPer2 AuGp
------ -- ------------ --------- --------- ---------- --------- -------
1000 + 11 2004 5 2005 6 2005 6 2005 Z001
1000 S ZZZZZZ 11 2004 5 2005 1 2005 6 2005
4. User D attempts to post a G/L document (FB50) in Period 02 2005 but the system issues a message saying that ‘he is not authorized to post in period 02’ although Account type S is opened from periods 1 to 6 (FrPer2 to ToPer2) 2005 as evidenced above.
5. I reversed the settings: Changed Account type ‘+’ from 1 – 6 (period 2) and ‘S’ into 6 – 6. Result = the document can be posted in 02 2005 without any problem. Meaning the ‘authorization check is done in ‘+’ not in the 'S'.
My questions:
a. Is this the way F_BKPF_BUP behaves as standard?
b. In conjunction with the said authorization object, how do we control OB52 by specific account types i.e. A, D, K, M, S? This is our aim.
Btw, this issue is an addition to the last post. Thanks a zillion!
Answer:
Working as designed...
You may have noted only the auth group can be placed on the '+' record in OB52 and as you have your records the period user 'D' is atempting to post to is cloed on record '+', SAP does not care about the account type for closed periods it only looks at the '+' record for contorl.
You cannot and should not control closed periods by account type, one ortwo people in the whole company should be able to poast to closed periods.