Role does not allow visibility on activities

Question

Using CRM 2007 sp4 I have recently created a new business role and have assigned this business role a pfcg authorisations role (based on the original sales manager role).  I was having problems having users assigned to this role being able to create activities.  When they try and create an activity in the calendar area, or through quick create links set up as direct links in the direct link groups or through the activity component no activities types were selectable from.  The setup of the authorisations appears fine as if i give the users sap_all access they can create any of the activity types they want.  In my pfcg role I had been using the authorisation object to control access to spsecific transaction types (object :  CRM_ORD_PR) and eveything seemed to be ok.
The system gives me the following info:
Details No transaction type is available for creating a transaction
Diagnosis: No transaction type is available when creating a transaction. This can be due to the following reasons:
No transaction type is available according to Customizing
The user has no authorization for the transaction type
System Response
It is not possible to create the transaction.
Procedure
Make sure that:
The transaction type is set up in Customizing
The user has authorization for the transaction type
From what i can see this appears to be an authorisation issue but i'm unsure what authorisation objects are required to create activities.
Any help would be appreciated
Regards
Eddie

Answer 1

Hi Eddie,
based on the fact that you are setting restrictions on transaction type CRM_ORD_PR , it means you are actually modeling your access according to the third level check during the authorization check process flow for business transaction processing.
As such you should have access for following authorization objects:
CRM_ACT (value 45 = allow)
CRM_ORD_PR (where you restrict the allowed activity AND the allowed transaction types)
CRM_ORD_OE (where you restrict access based on the allowed sales/service organization).
you must at least have all 3 authorization objects avaialble in your PFCG role, and some concrete values should be maintained as explained above.
The problem however 'might' also be due to missing authorization on "UI component level"; based on object UIU_COMP.
As such it 's a good idea to perform tracing.....
cheers
Davy Pelssers