Question:
Hi , i am trying to restrict display of purchase orders to user based on purchase organisation ids . The transaction i am using is bbppo01 in which there is no authorisation object where i can restrict the purchase orders based on purchase organisation id .In PFCG t-code I tried to click the organisational levels under the authorisations tab but i am getting the message that no org levels are available .thanks.
pras
Answer:
The code executed by bbppo01 MUST check the authorization Object that contains the field you want to control on. You cannot arbitrarily decide you want to conttrol on an object or field, the code MUST be designed to do so. If you run an ST01 Authorization trace onthe tcode you will see what is available for you to control on. If you See the object in the ST01 trace you can ADD the object in SU24 for the tcode ( or move the check in SU24 from C to CM) and PFCG will then bring the object into your role if you add the tcode in the menu tab of PFCG for your role. But The chance are you cannot control on the object if you role "works" and the user can execute the tcode at present.
You can look for a user exit to see if SAP will allow you to add the code to perfomr the check.