Question:
Hi...
Is there any way in which we can restrict authorisation for users for certain T-Codes such as CS03, CS11, CS12 and CS13 based on the Material type. What currently is happening is that the users are able to see confidential BOM related data for all the material types.
This will be of great use if we can restrict disclosure of confidential BOM data to users. Users should be able to see ONLY BOM data relevant to their material types and not others.
As this issue is related to austhorisation, i have posted this message in the Basis Fourum. If this is not the case please forward this message to the respected fourum.
Guys... please reply as soon as possible as this matter is very urgent.
Thanks and Regards
Prashant
Answer:
You contorl access to the BOM not the material. Therefore it is up to the creator of the BOM to add an authorization group on the BOM header and you contorl access to the BOM containing sensitive materials. The authobject is C_STUE_BER.
Answer:
If you prefer the restriction to be permanent, you could try config tcodes OS14 or OS24.
hope these helps.
Answer:
I want to have this as a permanent solution on user specific basis. i.e. one user should be able to use only the material types assigned to him and the other user should be able to view material types assigned to him. i think os12 and os24 will make this change globally and not on user specific basis. Is this possible?
Answer:
You create role to make it USER Specific. The setting is global and SAP could care less about your users. For those you want to control you create a role with specific values and for thoseyou do not they get the role with Asterisks in it.
Answer:
Hi
We have similar requirement for restricting user access to specific material type when they are using CS01/CS02. We were thinking to use user exit foir authorization check on meterial tyep, but it seems not a good choice. Do you have a better resolution for this issue?
Another thing is we want to see if there is a possiblity to limit user to certain explosion level when using CS11/CS12. ex. only see level 1. But standard sap does not have check on this. Any good idea
Thanks!
Ail