Authization object to restrict in Plant for tcode PMEVC
Hi Support,
In our company peoples are working in tcode PMEVC - Variant Configuration Modeling Environment. Now we want to restrict peoples in plant field. How to do it ? what is the authorization object for it. Can anybody help me for it? If yes then please.
Thanks
Asad
Dear,
Transaction is used for material types KMAT as per standard SAP.
Normally for material master, below authorization objects are used:
M_MATE_BUK - Company code
M_MATE_LGN - Warehouse Numbers
M_MATE_MAN - Data at Client Level
M_MATE_MAR - Material Types
M_MATE_MAT - Materials
M_MATE_MEX - Export License Data per Country
M_MATE_MZP - Customs Tariff Preference Data
M_MATE_STA - Maintenance Statuses
M_MATE_VKO - Sales Organization/Distribution Channel
M_MATE_WGR - Material Groups
M_MATE_WRK - Plants
If you are using KMAT material type and would like to restrict user, use M_MATE_MAR &M_MATE_WRK.
Regards,
Pardhu
Similar Messages
-
Post goods issue - restriction on plant - VL01N tCode
Hi All!
I have an authorization/restriction problem as regards posting goods in VL01N and VL02N.
I have more users (U1, U2...) and each user has the authorization to post goods just for one plant (U1-P1, U2-P2......) . The user U1 can create delivery for P1, P2 but he must post goods only for P1.
I created 2 type of roles: one role for all users with no restriction on plant but with restriction on movement type (no authorization for 601) and the other type role has the authorization for movement type 601 and the plant (Role1 for 601 and P1 assigned to U1, Role2 for 601 and P2 assigned to U2). And is working if the user wants to post goods from VL02N. But if the user posts goods from VL01N (before saving the delivery)......U1 can post goods for P2...
I don't know if I made clear which one is my need. If I succeed, please let me know if there is one solution. Maybe there is a way to disable the button Post goods issue for tcode VL01N.
Thanks in advance.
Best regards,
Florina ChetaFlorina,
tried what you explained.
I created a role with just VL01N transaction and system asks for shipping point and assigns actions 01 and 06.
Later I added transaction VL02N and system doesnt add any new authorization but just adds activity 02.
Now, I do not understand what activity type you are refering by 601.
Otherwise, its very simple to restrict access as yiou mentioned. Its perfect. -
To restrict authorization for tcode MEK1,MEK2,MEK3,MEK4 at plant level.
Hi,
We have a requirement where we need to restrict authorization for tcode MEK1,MEK2,MEK3,MEK4 at plant level.
Presently we can restrict authorization at Purchasing organization level but not at Plant level.
Any pointer please!
Regards,
ChetanFirst of all, this is not the right forum to post such a question. Coming to the requirement, this can be achieved by creating a role in PFCG where you can restrict plant and assign this role to each user id. Your basis team can do this.
thanks
G. Lakshmipathi -
I am looking to see whether org level restriction and cost center/fund center level restriction is possible for certain set of transactions.
I am using USOBX table for this analysis. This table has a check flag field ( same as in SU24) which says whether the Tcode (program) does the authority check for certain auth objects. Example- X (checked but not maintained in USOBT). This table pulls up several authorization objects under the 'X' category. However, when I do the System trace for the same tcode, all the objects (marked as X) are not captured. Instead only a few are captured.
Can we rely on the USOBX data or should we do system Trace for every tcode. I am just pulling a report and not creating roles at this point. So trace is time consuming. But data reliability is equally important.
My objective is to verify whether org level and cost center/fund center level restriction is possible or not for some tcodes.
Do you have any suggestion to achieve this faster (through USOBX or any other means)?
Thanks in advance
KeeI would suggest you to check USOBX_C and USOBT_C instead of USOBX and USOBT as it will have your customization as well and not just the standard ones given by SAP.
Also when check field is X ...it means the object is checked but not maintained for the t-code as you already said but I am not sure how much it will help you as the they will not be pulled by PFCG when you are creating the role until you change the object to Check / maintain . When you do that the check field will be Y and not X. So basically it is the Y one which you need to see.
Going for trace is time consuming for every t-code and I am not sure if it really needed. When your roles are in testing phase and are tested by the functional team or the team which needs it and if they are missing some object, you can run a trace and find the missing object....
I am not sure on what basis you want to change some field to Org level ...but typically it is done if you want to do segregation of roles based on these org level. There could be various other reasons and it is better to talk to your functional counterparts before changing a field to Org level.
for ex : If you want to segregate on company code, you will create co. code as Org level and create roles for different company code. -
Restrict PO creation for multiple plants for same company code
Hi Gurus,
We want to restrict PO creation for multiple plants in the same company code. Based on Standard SAP settings for Purchasing organization assignment with multiple Plant and multiple Plant assignment with single company code, this is happening. Is there a way that we can restrict by doing some customization change.
Any thoughts or ideas will be highly appreciating.
Thanks and Best regards,
Karun KumarHi,
Said functionality is not available in SAP standard.
To avoid the same ,i can suggest implement release strategy for PO,and then higher authority / commercial team can check created PO,if multiple plants available in single po then they have the option of rejection for the same.
Or else check BADI-ME_PROCESS_PO_CUST,take the help from abapor and apply the restriction to select multiple plant in PO.
Hope this will resolve your query,
Thanks & Regards,
Sandesh Sawant -
Un-restricted total stock for Plant/Material/StLoc combo, Split-val & WBS
Hi
Users need Un-restricted total stock for combination Plant/Material/StLoc combination ; we have MARD-LABST.
Further, needs WBS & split -Valuation materials stock in the same report or SQVI. I tried to create SQVI, but it`s giving WBS stock as multiple times for SLocs.
I`m using tables QBEW,MSPR,MCHB in the table join.
Pls advise me suitable solution as Std SAP report or SQVI.
Thanks,
GaneshThanks for reply.
But, I need unstricted stock for Mat/Plant/StLoc also to be displayed in the same report .i.e. MARD-LABST.
The MBBS gives stock at Plant level for WBS.
Can both be clubbed? Or need to get from separate reports?
Rgds,
Ganesh -
Create authorization for storage Loction for tcode ME21N
Hi All,
My requirement is to create authorization for storage Loction for tcode ME21N and ME51N.
There are standard authorizations for Plant, Document type Group and Org for ME21N
M_BANF_WRK, BSA,EKG, and EKO which i checked in TCODE SU24.
But there is no std authorization check for storage location.
If this is possible then please help me with the procedure and steps.
Please guide me with all the steps that i need to take care abt..
Thanks in Advance.
Regards
SujeerHi
This is the authorization objects for PO and PR
For PO : M_BEST_LGO for palnt/Storage location
For PR : M_BANF_LGO for palnt/Storage location -
Multiple Plants for Material and customer
Hi,
I have downloaded the Plants from the R/3 to CRM using DNL_PLANT object. The BP with Role 'PLANT' are created.
we have multiples plants for the same material,
I have downloaded the material master data, but in COMMPR01, the field DELIVERING LOC. is empty. Is that correct? How the system works with multiples plants.
What I can do?
Best regards
LidisaidHi Lidisaid,
Ideally, the field Delivery location must get populated. Just ensure that the followig settings have been maintained.
1. Adapter Object MATERIAL
Tcode: R3AC1
Choose the tab Tables/Structures Within Object
Add tables MARC and MARC_KEY
Please also check that MARC_KEY that the field Inactive is not flagged for this entry.(This is needed to download the PLANT information as interlinkages to CRM Online in the table COMM_IL_PRDLOC.)
The plant information is seen in the Sales & Distribution tab of the product master by double clicking on the Distribution Chain.
2. Add Relationship type PRDLOCS- LOCATION OF PRODUCTS
Tcode: COMM_HIERARCHY
Check if the corresponding Material Categories for which the PLANT information is to be downloaded has the interlinkage type LOCATION OF PRODUCTS maintained in the RELSHIP types for the products categories that are to be downloaded to CRM from R/3.
Note:
If no relationship types are assigned to the product category, the PLANT information will be downloaded to the interlinkage table COMM_IL_PRDLOC. But even if a single RELSHIP entry is maintained then additionally the RELSHIP type LOCATION OF PRODUCTS also have to be maintained. E.g. MAT_FERT
Wish this helps.
Regards,
Shalini Chauhan -
SRM recipient role restricted to plants
Hi
In SRM the organizational levels available in authorizations to the 'Recipient role' consist of 'Purch.org' and 'Purch.grp'.
How do I restrict the role to certain plants?
I tried adding the authorization object M_BBP_IM_1 to restrict actions according to plant but anyone with the recipient role can still see all purch.orders.Hi
Sorry for the delay - I had to get back to my costumer to try out your suggestion.
Unfortunately it does not solve the problem. The goods recipient role does not automatically check for Plant. - then I would have to use the BADI too - and it would take a lot of maintenance, since we eventually will have 12 different hospitals with each 3 plants.
I need to create som recipientroles, that can be restricted to different plants.
Do you or anyone?? have guidelines to creating an authorization object, that restricts that role to certain plants?
BR
Astrid -
May any one of you plz suggest me any userexits for tcode fch5.
i want to restrict the field of account id for validation.
how can i do this.
waiting for your reply.Hi Pawan,
U can use this program to find user exit for Tcode FCH5
Find User exit for Tcode
REPORT z_find_userexit NO STANDARD PAGE HEADING.
*& Enter the transaction code that you want to search through in order
*& to find which Standard SAP User Exits exists.
*& Tables
TABLES : tstc, "SAP Transaction Codes
tadir, "Directory of Repository Objects
modsapt, "SAP Enhancements - Short Texts
modact, "Modifications
trdir, "System table TRDIR
tfdir, "Function Module
enlfdir, "Additional Attributes for Function Modules
tstct. "Transaction Code Texts
*& Variables
DATA : jtab LIKE tadir OCCURS 0 WITH HEADER LINE.
DATA : field1(30).
DATA : v_devclass LIKE tadir-devclass.
*& Selection Screen Parameters
SELECTION-SCREEN BEGIN OF BLOCK a01 WITH FRAME TITLE text-001.
SELECTION-SCREEN SKIP.
PARAMETERS : p_tcode LIKE tstc-tcode OBLIGATORY.
SELECTION-SCREEN SKIP.
SELECTION-SCREEN END OF BLOCK a01.
*& Start of main program
START-OF-SELECTION.
Validate Transaction Code
SELECT SINGLE * FROM tstc
WHERE tcode EQ p_tcode.
Find Repository Objects for transaction code
IF sy-subrc EQ 0.
SELECT SINGLE * FROM tadir
WHERE pgmid = 'R3TR'
AND object = 'PROG'
AND obj_name = tstc-pgmna.
MOVE : tadir-devclass TO v_devclass.
IF sy-subrc NE 0.
SELECT SINGLE * FROM trdir
WHERE name = tstc-pgmna.
IF trdir-subc EQ 'F'.
SELECT SINGLE * FROM tfdir
WHERE pname = tstc-pgmna.
SELECT SINGLE * FROM enlfdir
WHERE funcname = tfdir-funcname.
SELECT SINGLE * FROM tadir
WHERE pgmid = 'R3TR'
AND object = 'FUGR'
AND obj_name = enlfdir-area.
MOVE : tadir-devclass TO v_devclass.
ENDIF.
ENDIF.
Find SAP Modifactions
SELECT * FROM tadir
INTO TABLE jtab
WHERE pgmid = 'R3TR'
AND object = 'SMOD'
AND devclass = v_devclass.
SELECT SINGLE * FROM tstct
WHERE sprsl EQ sy-langu
AND tcode EQ p_tcode.
FORMAT COLOR COL_POSITIVE INTENSIFIED OFF.
WRITE:/(19) 'Transaction Code - ',
20(20) p_tcode,
45(50) tstct-ttext.
SKIP.
IF NOT jtab[] IS INITIAL.
WRITE:/(95) sy-uline.
FORMAT COLOR COL_HEADING INTENSIFIED ON.
WRITE:/1 sy-vline,
2 'Exit Name',
21 sy-vline ,
22 'Description',
95 sy-vline.
WRITE:/(95) sy-uline.
LOOP AT jtab.
SELECT SINGLE * FROM modsapt
WHERE sprsl = sy-langu AND
name = jtab-obj_name.
FORMAT COLOR COL_NORMAL INTENSIFIED OFF.
WRITE:/1 sy-vline,
2 jtab-obj_name HOTSPOT ON,
21 sy-vline ,
22 modsapt-modtext,
95 sy-vline.
ENDLOOP.
WRITE:/(95) sy-uline.
DESCRIBE TABLE jtab.
SKIP.
FORMAT COLOR COL_TOTAL INTENSIFIED ON.
WRITE:/ 'No of Exits:' , sy-tfill.
ELSE.
FORMAT COLOR COL_NEGATIVE INTENSIFIED ON.
WRITE:/(95) 'No User Exit exists'.
ENDIF.
ELSE.
FORMAT COLOR COL_NEGATIVE INTENSIFIED ON.
WRITE:/(95) 'Transaction Code Does Not Exist'.
ENDIF.
Take the user to SMOD for the Exit that was selected.
AT LINE-SELECTION.
GET CURSOR FIELD field1.
CHECK field1(4) EQ 'JTAB'.
SET PARAMETER ID 'MON' FIELD sy-lisel+1(10).
CALL TRANSACTION 'SMOD' AND SKIP FIRST SCREEN.
Rgds,
Prakash -
Display activity for Tcode FSP0
Dear All,
I need to restrict the access to specific code FSP0 and need to restrict the access for create activity.
Now scenario is that as per functional requirement i had created a role containing t codes" FS00,FSS0,FSP0,FS01,FS02,FS05,FS04,FS06,OB_GLACC11,OB_GLACC12,OB_GLACC13"
now if i tried to make change in authorization object "F_SKA1_KTP" in roles it affects all tcodes in the role and functional people's are not able to preform create activity.
Is their any alternative way to restrict the access to display activity in this role ?
or is there any alternative object to restrict access of FSP0 ??
Regards
NikhilHi Nikhil,
Please create a new role with display only access and update the authorization accordingly for object F_SKA1_KTP.
If you mix FSP0 with other tcodes it will be difficult to restrict.
Regards,
Deepak Kori -
Hi Friends,
I am facing problem while developing BDC for tcode F150. The last action i.e. scheduling for particular dunning date is not getting executed in my BDC.
I am also pasting the end part of my BDC recording. Please review it and advise.
PERFORM bdc_dynpro USING 'SAPLF150_JOBS' '1000'.
PERFORM bdc_field USING 'BDC_CURSOR'
'F150V-STRZT'.
PERFORM bdc_field USING 'BDC_OKCODE'
'=JOBS'.
PERFORM bdc_field USING 'F150V-STRDT'
rdate.
PERFORM bdc_field USING 'F150V-XSTRF'
'X'.
select single SPLD into p_out from USR01 where bname = sy-uname.
perform bdc_field using 'ITCPO-TDDEST'
p_out.
CALL TRANSACTION 'F150'
Thank you,
Swapnil
Edited by: Swapnil Tawade on Sep 22, 2008 3:15 PMHi,
If u want it for some specific plants then before populating data to bdcdata internal table check the conditions for which the plant fields required values to be passed and if the condition is satisfied then pass the plant field to bdcdata table . If the condition is not satisfied then dont pass that plant field to bdcdata table bcoz if u r not passing any field to bdcdata table then that field is going have default values.
Regards,
Shafi -
Problem when recording the data using BDC for Tcode CJ02.
Dear Experts,
When i am trying to record the data for TCODE : CJ02 i need to enter the project Definition and enter the WBS element it takes me to the screen then i should select the WBS element and attach a file for that selected WBS element . The option for me to attach the attachment of file will be available on the application area(Services for the Object).
Now the problem when i try to do recording in SHDB this option like create attachement is not visible in the recodring . Kindly suggest me what can i do such that i attach the file for the particular project def and WBS element.
Either suggest any function module or other procedure .......
Regards,
Sana.Hi,
in BDC each and every action is recording. If your press enter in same screen that also recorded once aging may be this is your case repeating field values will appear. we can solve the problem for repeat fields like below.
suppose in your excel having repeated field X1 X2 X3 the X2 contains repeated field X3 means delete the X3 field.
Now In your itab having X1 and X2 fields. While in the LOOP the ITAB pass the X2 field to repeated the fields.
LOOP at ITAB to WA.
CLEAR bdcdata_wa.
bdcdata_wa-fnam = 'BDC_CURSOR'.
bdcdata_wa-fval = 'RM08M-EBELN'.
APPEND bdcdata_wa TO bdcdata_tab.
CLEAR bdcdata_wa.
bdcdata_wa-fnam = 'INVFO-BLDAT'.
bdcdata_wa-fval = wa-X2." 1st time pass the X2 fields
APPEND bdcdata_wa TO bdcdata_tab.
CLEAR bdcdata_wa.
bdcdata_wa-fnam = 'INVFO-BLDAT'.
bdcdata_wa-fval = wa-X2." pass the same value to repeated field
APPEND bdcdata_wa TO bdcdata_tab.
Endloop.
Hope you can understand.
Regards,
Dhina.. -
How to get Key and text for plant for which variable is created
Hi All
I have created one variable for Plant. User is going to give input for the plant for execution of query.I am displaying the variable value which is user putting in the query. kindly let me know how to display key and text both for the query.as key is displaying presently.
Regards
Atulhi Atul kumar jais
You have to create a text variable using replacement path for processing type and give the reference object which is the object which you created variable for, "replace with" one with key and anther one with text. Then you can display that in the header of the column or if you are using custom template, you can use webitem for it.
thanks.
Wond -
Screen exits/BADIs available for Tcode-QM02/QM03
Hi Everyone,
I have to modify a screen for Tcode-QM02( 'Checklist' tab) and add a drop down field to it.I have not worked on screen exits/BADIs prior to this please let me know how to proceed with this.
Alsoplease tell me how can I manually go and check out whether a exit or BADI is available for this transaction?
Please reply as its a bit urgent.
Thanks and Regards
Abhishekhi,
check these exits n badi's.
Transaction Code - QM02 Change quality notification
Enhancement/ Business Add-in Description
Enhancement
IWOC0004 Change single-level list editing PM/QM/SM ALV settings
IWOC0003 PM/SM authorization check of ref. object and planner group
IWOC0002 PM/SM notification: Check whether status change is allowed
IWOC0001 Create PM/SM notification: Determine reference object
IWO10027 User exit: Generate user-defined settlement rule
IWO10026 User check on setting status 'Do not perform'
Business Add-in
IQS0_STATUS_MAINTAIN Control of Changeability of User Status
IWO1_SUBSCREEN_0170 Display Additional Data on Object Screen 0170 PhysicalSample
IWOC_LIST_TUNING Performance Tuning for Lists in PM/CS
IWOC_OBJECTINFO_CHNG Changes to Data of Object Info Screen
WOC_FL_DETERMINE Determine Date for Determining Installation Loc. Equi.
NOTIF_AUTHORITY_01 Additional Authorization Checks for the Notification
goto system - status of ur transaction and find porogram name
then goto attributes of program n find package.
now goto smod or se18 click f4 click information system u will get all exits or badis available.
Maybe you are looking for
-
Sappfpar for multiple instances in one host
hi, There are 3 sap instances are running on one of my host. If I use sappfpar check <instance profile>, it gives what would be the worst case memory requirements.. Is there any way to check for all 3 instances together for memory requirements? Shou
-
Root.sh failed during RAC11.2g installation
Dears, I'm trying to install RAC 11.2 (Grid Infrastructure version is 11.2.0.1) on two linux nodes (OS version is Oracle Linux 5.11 2.6.39-400.215.10.el5uek) SELinux + Firewall are stopped, ASM works fine (listdisks and querydisk shows my disks corre
-
Can a slideshow exported to a DVD be shown on a PC computer?
I created a slideshow in iPhoto and exported it to a DVD which plays fine on my Mac, but I was told it won't play on a Windows PC. Is that true?
-
HI, How I can check the deleted sales order,Please give me the T-code for that. Thanks, Rash.
-
Can't use Trash icon in Mail in iPhone after upgrade?
Hello all: Have two mail accounts on my iPhone, both IMAP. Before the switch to 5, one was POP. At that time I could delete an email from either account by simply hitting the trash icon at the bottom of the screen, while the email was open. Now, tapp