Plant Authorization

Hi,
I was trying to restrict the user to get data for spefic plant . Is their a std approach to do this. I would like to have this restriction to custom programs/reports only.
Awaiting a reply

Hi,
Yes, it is possible with the authority check object. Here the basis/ function people will creat the Object and assigns the valid plants to it. we need to add the following code in the custome program to restict the execution to the specific plant.
         Authority check for Plant
      AUTHORITY-CHECK OBJECT 'Z_WERKS'(Authority check object)
                   ID 'ACTVT' FIELD '03'
                   ID 'WERKS' FIELD P_WERKS(Selection parameter)
      IF sy-subrc NE 0.
        MESSAGE e000 WITH
                    'No authorization to Division:'(054)
                    i_spart.
      ENDIF.
Hope this will help you.
Regards,
Satya

Similar Messages

Goods issue against STO (plant authorization)

Dear All
I have an authorization issue when doing goods issue from Plant 1, against an STO raised for Plant 2.
User has MIGO authorization for 351mvt with authorization object M_MSEG_BWA;
Also he has authorization for all storage locations of Plant 1 and 351mvt with object M_MSEG_LGO; And plant authorization of migo is given for Plant 1 with authorization object M_MSEG_WWA
To issue goods from plant 1 to Plant 2 against the STO raised at Plant 2, what authorization does he require? At the same time he should not able to do GR for POs of plant 2 etc.
Thanks in advance

Hi
I was also in same impression but the SU53 screenshot is showing authorization problem with object M_MSEG_WWA for Plant 2.
User has been given the same for plant 1 (own plant)

MF70-Plant authorization control object -reg

Hi,
While giving MF70 authorization to user we need to control based on Plant
Once i give MF70 t code authorization its authorizing the user all plants by default
is there any object to control plant (WERKS) in MF70 ?
regards,
madhu kiran

HI
Check the Profile attached to the used id and also whicle creating or changing the roles attached to the used in PFCg check for MF70 check for REM Backflush >plant > aganist it give the plant for which you want to assign
I hope it will work
Check and revert
Regards
Anupam Sharma

Plant Authorization Query

Hi All,
I am having a report in which I am displaying data about the materials, description their cost etc.
Now my requirement is to check the authorization for the person executing the report.
Here , there are two plant and i have to restrict the person from the other plant from executing the report for the plant to which he doesnt belong for example there is a person ABC in plant 123 and a person DEF in plant 456.
Now ABC should not be able to run the report for plant 456 and DEF should not be able to run the report for plant 456.
Please suggest what should be the approach for this??
Thanks

hi,
Go to su21 and check the authority check for the plant
this has to be done by the basis guy as per the recoommendatuions of the SAP Security guy on the client side. you use the authorization obejct for P_WERKS
and they will manage the same
Regards
Shiva

Plant authorization for Same Co. Code

D friends,
We’ve 2 plants in the same co code. Requirement is that user in Plant 1 should not have the authorization to enter Plant 2 in his Sales Order and vice-versa. We’re not able to control this through std. role matrix.
Hence pls suggest how this restriction should be implemented?
Thanks.

Hi R Sgr,
You talk to your basis guy to define the role for particular user
or
Program SAPMV45A , you can find the Include MV45AFZZ
Try in this user exit
Regards
Ramesh

Cross-Plant Authorization in VF03

Hi Experts,
One user has authorization to Plant - X which is not assigned to user in VF03 TCode.
When we checked VF03 TCode is not calling Plant Org. Level itself.
There is any way to restrict this?
How can a user have authorization to work on cross-plant which is not required by VF03 Tcode ?Whether it can be possible by any other Org. levels?
Note : User is having VF03 Tcode in Role 1.Plant - X is present in Role 2 which is assigned to him.So the user can able to post in Plant - X?
Kindly help me to solve the problem.
Regards,
Karthika

HI,
Please check whether VF03 is looking for Plant (WERKS) or Sales Org (VKORG). I think it should look for the latter i.e. VKORG. If its looks for VKORG then restrict using that. It is wont suffice if it is controlled via Plant or WERKS. Please check first via Trace what the transaction is looking for. It should be Sale Org and control with that.
Regards
Aveek.

Authorization Control for Quick Viewer

Hi,
I have create a quick viewer using table join and I notice that the authorization when I execute the program is only at table authorization level.
Question: Is quick viewer authorization be down to the field level. For example, if I join MKPF and MSEG and RESB to view stock movement with reservation information. Can quick viewer check the plant authorization object (M_MSEG_WMB) to make sure that the person execute the report is only able to view his/her own data?
Regards,
Norman

It's not an ABAP question. You might want to ask your Basis/Security consultant or move the question to the corresponding forum.

Authorization Check while TECO PM ORDER

While performing action TECO of PM order, system check the authorization of Mtc. Plant of Equipment entered in the PM Order in place of Mts. plant authorization of PM Order it self. If during the period of PM order creation to TECO PM order the equipment moved from one Mtc. Plant to other it create problem. My requirment is that system should check the authorization of Mtc. Plant of PM Order copied from equipment while creation of order.

Sanjay,
Plant Maintenance is having authorization objects I_IWERK and I_SWERK which checks the maintenance planning plant and maintenance plant respectively with reference to T-Codes (For ex: IW32) which you can check for particular user and can make changes with this authorization object in user profile.
But first fo all I would like to clarify that in Plant Maintenance, whenever you are moving the equipment from one plant to another plant, it is always advisable to complete all the pending order and notifications prior to dismantling of the equipment and it is pratical too as it is obvious that maintenance team would complete all its pending work before shifting any equipment.
So I would guide that before shifting any equipment in SAP please complete all its orders and then dismantle and then re-install equipment to other plant.
Hope this helps.
Chin2.

Authorisation of Objects to Plant Specific Users

Hi,
I developed Zreports for HR and PP modules. In these reports ,Selection Screen contains Personal Area and Personal Subarea(in case of HR module) and Plant(PP module). Now any User can give any Personnel area or Plant and can view the report Output.But the User should be able to view the report Output only when he gives the Personnel Area or Plant to which he belongs otherwise not. For example if the User belongs to Personnel Area or Plant -
>1500,he should have the authorisation to run the report for 1500 only. If he gives any other Plant ,i should raise an error message. How can i approach to this issue?Please help.
Regards
K Srinivas

Hi,
Lets say based on the plant you want to assign the authorization objects.
Then based on the plant authorization, first check any standard reports or standard transactions are now taking place. Usually the users belong to the same can answer this better.
Now by looking at the authorization given to those standard transactions, we can trace the roles given, and we can see the authorization objects used there.
I mean there will be some authorization objects existing for plants.
So in the at selection screen of your custom development, first check the authorization with respect to the plant given in the selection screen, then proceed.
For more information look into the transaction SUIM.
Regards,
Santhosh.

PM Organization Units Authorization on User Level

Hello experts,
Is there a way to add authorization for an organization unit (i.e. Planning Plant) on a user (SU01) level and not on a authorization objects (PFCG) level?
For example,
I would like to create the following Role (profile):
ZPM_AUT_EQM_EQUIPMENT_DISPLAY
This role should be able to display equipment from the Plant Maintenance module.
However our problem is, we would like to create authorization levels with organizational units for each user:
For example:
User jsmith has ZPM_AUT_EQM_EQUIPMENT_DISPLAY assigned but can only display equipment from Planning Plant SL01.
We know we can create this authorization creating several roles, like:
ZPM_AUT_EQM_EQUIPMENT_DISPLAY_SL01
ZPM_AUT_EQM_EQUIPMENT_DISPLAY_SJ01
ZPM_AUT_EQM_EQUIPMENT_DISPLAY_AG01
but our idea is not create several roles, but to assign the Planning Plant authorization on a user level and leave just one role so we would only need ZPM_AUT_EQM_EQUIPMENT_DISPLAY.
Is there a way to do this?
Thank you in advanced for your replies.
Best regards,
Fernando Montenegro

Hi ,
Could you share about your solution ? I think I have face the same problem as yours.

Authorization on Summarization Report

Hi Guys
I need to know, how I can achieve Plant authorization on Project summarization reports.
I can explain the scenario:
We have Project manager A. who is having authorization of for PLANT 1
So he should not allow seeing summarization report for any other PLANT.

Hi Guys
I need to know, how I can achieve Plant authorization on Project summarization reports.
I can explain the scenario:
We have Project manager A. who is having authorization of for PLANT 1
So he should not allow seeing summarization report for any other PLANT.

Hierarchy Authorization Node F4 help

Hi Gurus,
I have created an fixed hierarchy + variable hierarchy node combination and set the authorization for 0profitcenter. But the problem is when run the query in the RSECADMIN analysis, and click on F4, it just shows me the allocated nodes alone,which is perfect. But when i run the same query in portal,,,the F4 functionality shows the entire hierarchy ,but then the screen variable is defaulted with the hierarchy node value ( which is fine).But am confused as to why the F4 shows the entire hierarchy,,, because this would enable other the user to see other profit centers as well is not good.
Can someone help me out on this,,,,its on BW 7,,,
thanks in advance,,

List of vendors can be restricted through user exits,
For plant authorization object for purchase order is M_BEST_WRK &
For purchase organization object is M_BEST_EKO,
You can also personalize header & item level settings in purchase order,So that option for searching in
F4 Selection can be avoided.
Best is to create transaction variant for ME21N using SHD0 for respctive fields.
Edited by: Jeyakanthan A on Apr 9, 2010 10:09 AM

Bussiness logic/technical flow for report with tcode MB5B

Guys,
Please send me any Functional Spec or Technical Spec of the standard SAP report with tcode MB5B ( Stock as on posting date). Any document explaining logic or technical flow is very much useful to me..I need to understand the logic and what are all the underlying tables used. I will assign more points to anyone who help me.

MB5B - Stock on posting date
The report Stock for posting date lists a company's own stocks in a particular time period (earliest date/Time 00:00, latest date/time 24:00).
The posting date is used for selection. Note that the posting date may be different from the entry date (date entered in the system) as well as the document date.
Starting with the current stock balance, the report uses the material documents to calculate the stock balance for the specified posting date.
Requirements
You need authorization to display material documents for all chosen plants (authorization object Material documents: plant, activity 03).
Output
Thisreport issues a list with the following information for each material:
Stock quantity and stock value on first date
Total and value of all receipts
Total and value of all issues
Stock quantity and stock value on last date
List of the material documents that were posted in the specified time period
To go to the detail screen for the material document item, place the cursor on a material document and choose Goto -> Document item
If you require more data and want a detailed evaluation, you can enhance the current layout or choose another existing layout via Settings -> Layout.
Tables Used :
t001; t001w; t001l; mchb, mbew,mseg.
Thanks

Issue with Variable

Hello,
I have create a optional variable of type user entry on char 0plant it is a standard variable 0S_PLANT in the report is build on the ODS in 3.5 .
when the user executing the report without entering any value into this value its trigger a authorization error as below
You do not have authorization to read object Z:PLANT 'AUTHORIZATION FOR
PLANT IN BW BROWSER'
     Message no. BRAIN804
Procedure
    Check your request: Your request was checked against the authorization
    for object 'Z:PLANT' 'AUTHORIZATION FOR PLANT IN BW BROWSER'.
    Request other data if necessary or ask the person responsible for your
    authorization to provide you with sufficient authorization for object
    'Z:PLANT' 'AUTHORIZATION FOR PLANT IN BW BROWSER'.
if user enter the value it is executing sucessfully.
Authorization is given to all info objects in the role.
pls let me know the reason for this
Thanks & Regards
Edited by: priya k on May 11, 2009 7:19 AM

Hi Priya,
I think Z:plant is an authorization object created for 0plant and is checked for the underlying infocube.
Please check if the user is given proper authorization to the required 0plant values.
And try using a authorization variable instead of the standard variable.
The authorization variable should bring in the plant values assigned to the user in the role.
Regards,
Archana

User defined selection screen

Hi, In my program i used a default seelction screen and 5 user defined selection screen. Based on the selections made in default selection screen, it should go to the corresponding user defined screen.
and the problem iam getting if i press enter jey insted of F8.
""Selection screen ZP2I_MASSCHANGE_TEMP1 1000 was
not called using CALL SELECTION-SCREEN"""
the code is as follows.
      A T   S E L E C T I O N-S C R E E N
*AT SELECTION-SCREEN.
AT SELECTION-SCREEN ON RADIOBUTTON GROUP rgp1.
CHECK SY-UCOMM EQ 'ONLI' OR SY-UCOMM EQ 'CRET' .
Download
IF r_dwnld = c_check.
Material Screen Call
    IF r_matplt = c_check.
      CLEAR p_werks7.
      sree = 'A'.
      CALL SELECTION-SCREEN 170.
      ENDIF.
Material Storage Screen Call
    IF r_matstr = c_check.
      CLEAR p_werks1.
      sree = 'B'.
      CALL SELECTION-SCREEN 110.
    ENDIF.
Material Handling Screen Call
    IF r_mathan = c_check.
      CLEAR p_werks2.
      sree = 'C'.
      CALL SELECTION-SCREEN 120.
    ENDIF.
Material Pick/Up Delivery Screen Call
    IF r_pcdt = c_check.
      CLEAR p_werks3.
      sree = 'D'.
      CALL SELECTION-SCREEN 130.
    ENDIF.
Material Inboundlogistics Screen Call
    IF r_inlogs = c_check.
      CLEAR p_werks4.
      sree = 'E'.
      CALL SELECTION-SCREEN 140.
    ENDIF.
Material Packaging Screen Call
    IF r_pkng = c_check.
      CLEAR p_werks5.
      sree = 'F'.
      CALL SELECTION-SCREEN 150.
    ENDIF.
ENDIF.
Upload Screen Call
IF r_upld = c_check.
    IF ( r_matplt = c_check OR
       r_matstr = c_check OR
       r_mathan = c_check OR
       r_pcdt   = c_check OR
       r_inlogs = c_check OR
       r_pkng   = c_check ).
      CLEAR p_uload.
      sree = 'G'.
      CALL SELECTION-SCREEN 160.
    ENDIF.
ENDIF.
     s T A R T - O F - S E L E C T I O N
START-OF-SELECTION.
DOWNLOAD
CASE sree.
    WHEN 'A'.
Select Material Details
      PERFORM get_material_data.
      IF NOT tbl_matplt[] IS INITIAL.
        IF p_dalv7 = c_check.
Display list in ALV
          PERFORM setup_alv_report.
        ELSE.
Download Storage data into local file
          PERFORM download_file USING p_matdet.
        ENDIF.
      ELSE.
        MESSAGE s020.
      ENDIF.
      CALL SELECTION-SCREEN 170.
Select Material storage data
    WHEN 'B'.
      PERFORM get_storage_data.
      IF NOT tbl_matstr[] IS INITIAL.
        IF p_dalv1 = c_check.
Display list in ALV
          PERFORM setup_alv_report.
        ELSE.
Download Storage data into local file
          PERFORM download_file USING p_matstr.
        ENDIF.
      ELSE.
        MESSAGE s020.
      ENDIF.
      CALL SELECTION-SCREEN 110.
Select Material Handling data
    WHEN 'C'.
      PERFORM get_materialhandling.
      IF NOT tbl_mathand[] IS INITIAL.
        IF p_dalv2 = c_check.
Display list in ALV
          PERFORM setup_alv_report.
        ELSE.
Download Material Handling data into local file
          PERFORM download_file USING p_mathan.
        ENDIF.
      ELSE.
        MESSAGE s020.
      ENDIF.
      CALL SELECTION-SCREEN 120.
Select Pick/Up DayTime data
    WHEN 'D'.
      PERFORM get_pickup_delivery.
      IF NOT tbl_pcdel[] IS INITIAL.
        IF p_dalv3 = c_check.
Display list in ALV
          PERFORM setup_alv_report.
        ELSE.
Download Pick/Up DayTime data into local file
          PERFORM download_file USING p_pcdt.
        ENDIF.
      ELSE.
        MESSAGE s020.
      ENDIF.
      CALL SELECTION-SCREEN 130.
Select Inbound Logistics data
    WHEN 'E'.
      PERFORM get_inboundlogistics.
      IF NOT tbl_inlog[] IS INITIAL.
        IF p_dalv4 = c_check.
Display list in ALV
          PERFORM setup_alv_report.
        ELSE.
Download Inbound Logistics data into local file
          PERFORM download_file USING p_inlogs.
        ENDIF.
      ELSE.
        MESSAGE s020.
      ENDIF.
      CALL SELECTION-SCREEN 140.
Select Packaging data
    WHEN 'F'.
      PERFORM get_packaging.
      IF NOT tbl_pkng[] IS INITIAL.
        IF p_dalv5 = c_check.
Display list in ALV
          PERFORM setup_alv_report.
        ELSE.
Download Packaging data into local file
          PERFORM download_file USING p_pkng.
        ENDIF.
      ELSE.
        MESSAGE s020.
      ENDIF.
      CALL SELECTION-SCREEN 150.
    WHEN 'G'.
Material Details data upload
      IF r_matplt = c_check.
Free memory IDs corresponding to upload tables
        PERFORM free_memory.
Upload Material details from local file
        PERFORM load_file USING p_uload.
Prepare data
        PERFORM prepare_mat_data.
Get actual Material Details from ZP2_MATPLT
        PERFORM get_old_material_data.
Validate new data against database entries
        PERFORM validate_material_data.
Check Plant authorization
Move plants to itab.
        REFRESH tbl_plts.
        LOOP AT tbl_matplt.
          tbl_plts-werks = tbl_matplt-werks.
          APPEND tbl_plts.
          CLEAR tbl_plts.
        ENDLOOP.
        DELETE ADJACENT DUPLICATES FROM tbl_plts
        COMPARING werks.
Check authoriztions
        PERFORM check_plant_authorization1 TABLES tbl_plts.
        REFRESH tbl_plts.
        IF p_trun IS INITIAL.
Modify material data
          PERFORM modify_zp2_matplt.
        ENDIF.
Material Storage data upload
        IF r_matstr = c_check.
Free memory IDs corresponding to upload tables
          PERFORM free_memory.
Upload material storage data from local file
   PERFORM load_matstr_data USING p_uload.
          PERFORM load_file USING p_uload.
Get the material storage data from database
          PERFORM get_old_storage_data.
Get material plant data for the corresponding
Storage data.
          PERFORM get_matplt_data_storage.
Get data from table fields
          PERFORM get_tblfld_values.
Validate data against database entries
          PERFORM validate_storage_data.
Check Plant authorization
Move plants to itab.
          REFRESH tbl_plts.
          LOOP AT tbl_matstr.
            tbl_plts-werks = tbl_matstr-werks.
            APPEND tbl_plts.
            CLEAR tbl_plts.
          ENDLOOP.
          DELETE ADJACENT DUPLICATES FROM tbl_plts
          COMPARING werks.
Check authoriztions
          PERFORM check_plant_authorization1 TABLES tbl_plts.
          REFRESH tbl_plts.
          IF p_trun IS INITIAL.
Modify material storage data
            PERFORM modify_zp2matstr_table.
          ENDIF.
        ENDIF.
Material Handling data upload
        IF r_mathan = c_check.
Free memory IDs corresponding to upload tables
          PERFORM free_memory.
Upload material Handling data from local file
          PERFORM load_file USING p_uload.
Get the material Handling data from database
          PERFORM get_old_materialhandling.
Get material plant data for the corresponding
handling data.
          PERFORM get_matplt_data_handling.
Validate data against database entries
          PERFORM validate_handling_data.
Check Plant authorization
Move plants to itab.
          REFRESH tbl_plts.
          LOOP AT tbl_mathand.
            tbl_plts-werks = tbl_mathand-werks.
            APPEND tbl_plts.
            CLEAR tbl_plts.
          ENDLOOP.
          DELETE ADJACENT DUPLICATES FROM tbl_plts
          COMPARING werks.
Check authoriztions
          PERFORM check_plant_authorization1 TABLES tbl_plts.
          REFRESH tbl_plts.
          IF p_trun IS INITIAL.
Modify material handling data
            PERFORM modify_zp2mathand_table.
          ENDIF.
   ELSEIF sy-ucomm = c_s.
     LEAVE SCREEN.
        ENDIF.
Material Pick/Up DayTime data upload
        IF r_pcdt = c_check.
Free memory IDs corresponding to upload tables
          PERFORM free_memory.
Upload Pick/Up DayTime file data from local file
          PERFORM load_file USING p_uload.
Get the Pick/Up DayTime data from database
          PERFORM get_old_pickup_delivery.
Get Inbound logistics data corresponding to handling
          PERFORM get_inlogs_pcdel.
Validate data against database entries
          PERFORM validate_pcdel_data.
Check Plant authorization
Move plants to itab.
          REFRESH tbl_plts.
          LOOP AT tbl_pcdel.
            tbl_plts-werks = tbl_pcdel-werks.
            APPEND tbl_plts.
            CLEAR tbl_plts.
          ENDLOOP.
          DELETE ADJACENT DUPLICATES FROM tbl_plts
          COMPARING werks.
Check authoriztions
          PERFORM check_plant_authorization1 TABLES tbl_plts.
          REFRESH tbl_plts.
          IF p_trun IS INITIAL.
Modify Pick/Up DayTime table
            PERFORM modify_zp2pcdt_table.
          ENDIF.
   ELSEIF sy-ucomm = c_s.
     LEAVE SCREEN.
        ENDIF.
Material Inbound Logistics data upload
        IF r_inlogs = c_check.
Free memory IDs corresponding to upload tables
          PERFORM free_memory.
Upload Inbound Logistics file data from local file
          PERFORM load_file USING p_uload.
Get the Inbound Logistics data from database
          PERFORM get_old_inboundlogistics.
Get data from table fields
          PERFORM get_tblfld_values.
Get Vendor data
          PERFORM get_vendor_inlog.
Get material plant data for the corresponding
Inboundlogistics data.
          PERFORM get_matplt_data_inlog.
Validate data against database entries
          PERFORM validate_inlog_data.
Check Plant authorization
Move plants to itab.
          REFRESH tbl_plts.
          LOOP AT tbl_inlog.
            tbl_plts-werks = tbl_inlog-werks.
            APPEND tbl_plts.
            CLEAR tbl_plts.
          ENDLOOP.
          DELETE ADJACENT DUPLICATES FROM tbl_plts
          COMPARING werks.
Check authoriztions
          PERFORM check_plant_authorization1 TABLES tbl_plts.
          REFRESH tbl_plts.
          IF p_trun IS INITIAL.
Modify Inbound Logistics table
            PERFORM modify_zp2inlog_table.
          ENDIF.
        ENDIF.
Packaging data upload
        IF r_pkng = c_check.
Free memory IDs corresponding to upload tables
          PERFORM free_memory.
Upload Packaging file data from local file
          PERFORM load_file USING p_uload.
Get the Packaging data from database
          PERFORM get_old_packaging.
Get material plant data for the corresponding
Packaging data.
          PERFORM get_matplt_data_pkng.
Get Vendor data
          PERFORM get_vendor_pkng.
Get data from table fields
          PERFORM get_tblfld_values.
Load Primary container reference data
          PERFORM primary_container_data.
Validate data against database entries
          PERFORM validate_packaging_data.
Check Plant authorization
Move plants to itab.
          REFRESH tbl_plts.
          LOOP AT tbl_pkng.
            tbl_plts-werks = tbl_pkng-werks.
            APPEND tbl_plts.
            CLEAR tbl_plts.
          ENDLOOP.
          DELETE ADJACENT DUPLICATES FROM tbl_plts
          COMPARING werks.
Check authoriztions
          PERFORM check_plant_authorization1 TABLES tbl_plts.
          REFRESH tbl_plts.
          IF p_trun IS INITIAL.
Modify Packaging data
            PERFORM modify_zp2pckg_table.
          ENDIF.
        ENDIF.
      ENDIF.
   IF p_trun = c_check.
Display the Error list
    PERFORM display_result.
      CALL SELECTION-SCREEN 160.
ENDIF.
ENDCASE.
Another problem is If i press BACK on the report output, it is coming to the default selection screen. and my requirement is, it should come to the corressponding user defined selection screen and not the default selection screen.
PLz help me in this regard.. Iam breaking my heading, but could not able to solve it.
Thanks in advance
sree

Hello,
You must have defined user command for the radio button. This is not required. Just try putting it in at selection screen. AT SELECTION-SCREEN ON RADIOBUTTON GROUP rgp1.
the moment the user clicks the radio button it will go to this event and call the screen. Just use AT SELECTION-SCREEN.
Regards,
Shekhar Kulkarni

Plant Authorization

Similar Messages

Maybe you are looking for