Authorisation group and Material group

Question

Hi Guys,
              When a user create a PO, The material group assigned to Authorization group, is allowing the user user to create PO, whose role is not assigned to the authorization group.
I am looking for solution, to restrict user from creating PO, whose role is not assigned to authorization group.
Is there any user exit available to solve this issue.
Thanks

Answer 1

HI,
In PR and PO transaction, there is no authorization object that check
the material group.
Only the following objects are checked in ME21N :
M_BEST_BSA
M_BEST_EKG
M_BEST_EKO
M_BEST_WRK
To fulfill your requirement, you could consider the following
suggestions :
- in txn ME21n and Me51n , enter the value of the material group under
  personal setting. (in txn ME21n, click on personal setting, select
  default value   > PO item, fill in the corresponding material group
  click on always propose)
- in the customization of purchasing (spro  > material management   >
  purchasing   > Purchase order   > Define screen layout at document
  level , select field selection akth and akte and aktv, double click
  on basic data, item. for field material group, select display only
  instead of optional!
With the above setting, the material group will always defaulted for
users and the screen will be grey off, do not allow user to change it.
The only setback of this suggestion is you will have to setup personal
setting for every new user.
If you want only restricted GroupS to be displayed as defined in a role,
there is no workaround in the standard design. To achieve this, you
have to modify the standard coding and add an extra authority check for
your authorization object (eg; Z_BEST_WGR). The standard program, in
which the authorization check for the PO position takes place is
"MM06EF0B_Berechtigungen_Kopf".
The attached OSS note 20534 will explain in detail, how the
authorization check works and also provides an example of the necessary
coding to implement the authorization check for your own authorization
object:
EXAMPLE :
  authority-check object 'F_KNA1_BUK'
       id 'BUKRS' field '01'
       id 'ACTVT' field '03'.
  if sy-subrc <> 0.
    message e...   "Nicht berechtigt um ...
  endif.
BUT please take into account, that ANY changes to the standard coding is
a modification.
There´s no user exit available.
I hope this helps!
Best Regards,
Arminda Jack