Maintenance Order Settlement Authorization

Question

Dear Experts,
I have the following scenario.
Maintenance Order types:
A1, A2, A3 and A4
User ID1 and User ID2, both are having as of now authorization for T.Code: KO88.
Now, For User ID1, I want to restrict his authorization for order type A4.
          For User ID2, I want to allow this user for only order type A4.
Basically I want to restrict user to settle certain type of orders.
Thanks in advance.
Rajat

Answer 1

Dear Rajat,
Please check following Two ways of achieving your requirement.
Please check the Authorization Roles provided to the user who is currently doing Settlement in table AGR_USERS & Check if any of these Authorization Roles has value AUFART by passing in field FIELD in table AGR_1251. you can also pass your order types in field Low to check if he is getting Order Type Authorization from somewhere.
If you get positive Result, Copy the Object & Split your role to restrict the authorization for user by chnaging desired Order Types.
This will confirm if SAP Check Order Type authorization while doing Order Settlement.
If the result is Negative, then You can follow following Cutom way to achieve same.
Create a Cutom Tcode (Ex: ZPMKO88) and ask user to enter Order Numbers in Selection Screen. You can give Multiple Option over there.
Once user enters the Order Numbers, Read the Order Types for same from Table AUFK & Perform Authority Check using Authorization Object I_AUART.
If this check is successful, Call Transaction Code KO88 & Pass these Order Numbers with Default parameters in it for Settlement.
You will have to restrict the User Role for this Object for desired Order Types.
I am unable to test Option 1 in my system hence request you to check it the way I explained.
For Option 2, you will need help from your ABAP & Securities Consultant.
Do let me know if Answer was helpul Or if you have any additional query.
Thanks.
Regards,
Avi