Authorization on sensitive data

Question

Hello Gurus,
In one of the infocubes we have authorization activated by plant. So it allows the users to see data only from their plants.
ie
Plant PurchaseOrder customer Qty Price(Sensitive)
A 111111 C1 10 $100
B 222222 C1 1 $10
Currently a User from Plant A can see the data in the first row and user from Plant B can see the second row. User from Plant A is not allowed to access Data of Plant B and Vice- Versa
The requirement is that the user from Plant A should be able to see Row 1 + Row 2 (except the value in Price info Object).
How to define the Authorization at field level to implement this security ....
Thanks

Answer 1

Hi,
When we create the custom reporting Authorization object in transaction RSSM, there's a field 1KYFNM.
But it's mentioned in this link that Key Figures cannot be marked as Authorization relevant.
http://help.sap.com/saphelp_nw04/helpdata/en/6b/ebb3ac244f11d5b2e30050da4c74dc/content.htm
May be you can try the following authorization.
Not exactly what you require beacause this'll display the Overall Qty and Price
of Plant B for users from Plant A.
You can define two seperate authorizations for Users from Plant A.
Authorization I
Plant - A.
Purchase Order - *
Customer - *
This Authorization enables users from Plant A to view all the details based on Purchase Orders
and Customers including detailed Qty and Price for Plant A.
Authorization II
Plant - * ( or B depending on your requirement)
Customer - <b>:</b>
Purchase Order - <b>:</b>
When you use <b>:</b> as an authorization value it'll only display the overall Result based on Purchase Order
and Customers for Plant B ( If *, then for all Plants). ie the users will only be able to view the
overall qty for Plant B.
For users from Plant B, you can define the authorization as follows.
This'll display the entire details for Users from Plant B for Plant B.
Plant - B.
Purchase Order - *
Customer - *
Also refer Setting Up Reporting Authorizations.
http://help.sap.com/saphelp_nw04/helpdata/en/a0/48f438f3422f2ce10000000a114084/frameset.htm
Refer this document also.
<b>Advanced Features of SAP BW Reporting Authorizations</b>
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/1b439590-0201-0010-ea8e-cba686f21f06
Regards
Hari
Message was edited by: Hari Krishnan K
Message was edited by: Hari Krishnan K