Posting authorization restriction in t-code F-02

I have created a scenario for park/post for special GL entries. for that I will be using f-02 to hold the invoice and fb11 to post the invoice.
I need to restrict the authorization of posting in F-02 so that the user can only held the invoices. any possibility to restrict the posting rights? I dont want to go on screen variants? cant it be done from second level authorization?
Looking forward for the feedback!

@Vinod Vemuru
I have checked, system is still allowing to post the document.
I have trace the system for authorization check in ST01, I can see system has checked just the activity as 01 to post the document.
@Obaid Javed
I don't think it can be possible through any standard authorization object. You may have to go for your own custom authorization object or you may go for the exit or badi to restrict that.

Similar Messages

Posting limit restriction ( UpTO 10000) for T Code FB60 - for specific GL

Dear All,
Posting limit restriction ( UpTO 10000) for T Code FB60 - for specific GL
Is it Possibal ?
Any other way to stop Posting Amt more than Rs 10000 ( Ten Thousand)
In specific T Code FB60
Required urgent Help,
Your early reply / solution is expected
Regards,
S Kulkarni

Hi,
Just go to OB28, define a validation (if you do not use one already), define one step, define the prerequisites on BSEG level of the account and define the check.
For example, you can use the validation for the following situation: You want to make sure that postings to the expense account "Telephone costs" can only be posted to the services cost center "Telephone". You can carry out the checks needed for this by using the validation.
Activities
If you want to define new validations, go through the following activities:
1. Place the cursor on a line in which company code and callup point are entered (you can enter company code and validation callup point via Edit -> New entries).
2. Afterwards select Environment -> Validation. You reach the first screen for maintaining a validation.
3. Select Validation -> Create. Enter the required name. After pressing ENTER, you come to an overview screen of the validation activities belonging to the validation.
4. Select Insert entry. On the next screen you can describe a new validation activity. You describe the check requirements and the actual check for this. The syntax to be used for this is described in the online help (F1 help) for the input fields for Requirements and Check. You can also define a message (warning or error message) which is sent if the check is not successful.
If you want to change validations which already exist, proceed as follows:
1. Place the cursor on an already existing entry and select Goto -> Validation.
2. On the next screen select Validation -> Display or Validation -> Change. After pressing ENTER, you get to the overview screen of the validation activities belonging to the validation. If you select Insert entry, you can carry out changes if necessary.
Regards,
Eli

Restrict a t.code VK11 using Site as authorization object

Hi all,
We want to restrict VK11 t.code using Site as one of the authorizations. By default it has only Sales Org, Distr channel and division. I've added one more field for "Site" manually.
We have defined specific values for Site in authorization objects. Still system does not restrict VK11 executed by user as per site. It works with Sales org/Distr ch/Division. But it does not restrict Site-wise for that role.
Please help.
Regards,
Ankush

> I've never got past 'play dead' with such objects
Yip, I know that feeling. It is like when you leave home for a long trip having packed everything you need, but you still have the feeling that you have forgotten something important behind and will kick yourself when you need it.
> Can you please provide step by step instructions for that?
There is no step-by-step procedure nor medication to take for it. You just have to wait for it to dawn on you...
Enjoy the weekend and happy coding authority-checks,
Julius
ps: I heard that this feeling is also caused by the rising popularity of ABAP OO programming techniques, where the checks are often natively imbedded.

MIR4 Invoice - Restrict POST Authorization for Some Users

Hi Experts,
We are doing Invoice Release Workflow (MIR7) With 3 level Approval. When the document goes for approval in EDIT mode (MIR4) to multiple Levels anyone can change the document but the post authorization should be given only to the manager.
We created a Role with authorization object M_RECH_WRK and enabled only (3 Display and 77 Pre-Enter) still post button could not be disabled for some users. Kindly suggest a way to disable POST Option in MIR4 only for certain Users.
Regards,
Dheepak

Hi Dheepak,
Refer to these thread:
[Disable post option in MIR7|Disable post option in MIR7;
[ POSTING ISSUE|MIR7 posting issue;
Hope you find these useful.
Reetesh

Validation when posting a document using T. Code FB50 or F-02

Dear Experts
Please let me know on how to validate when posting a Cross Company Transaction using T. Codes FB50 or F-02. The requirement is to restrict Branches (each Branch is a Company Code in SAP) to post any Cross Company documents by selecting HO Company Code in Line Item, system has to stop the User by giving Error Message.
We can't control this using User level Authorizations because, here the Authorization is provided to the Users to post the Transactions using T. Codes FB50 and F-02.
To restrict this, I created a Validation as below:
Prerequisite:
BKPF-TCODE = 'FB50' OR BKPF-TCODE = 'F-02' AND
BKPF-BUKRS = 'Br. Company Code' AND
BSEG-BUKRS = 'HO Company Code'
Check:
FALSE
Message:
You Can't post Cross Company Transactions using T.Code FB50 or F-02
And I activated the above Validation in OB28 for HO and Branch Company Codes. But the Validation is not working properly. Can anybody help me on how to proceed further in this regard please.

Hi,
I haven't tried to use a transaction code for Validation purpose. Instead, I have used document type as prerequisite and then check:
BKPF-BUKRS = 'Br. Company Code' AND
BSEG-BUKRS = 'HO Company Code'
If the condition is met, it displays an error (per the message in validation) while completing the line item details on posting a document.
Please let me know if that helps. If not, I can try to replicate your scenario and let you know if there is anything missing.
Thanks,
Ashish

Data inconsistency: posting with restricted transaction type (FAA_POST047)

Hi colleagues!
I have the following error:
Data inconsistency: posting with restricted transaction type
Message no. FAA_POST047
Diagnosis
You are trying to post in company code 1000 with transaction type 130 in ledger group 0N. According to table TABWA, this transaction type is limited. Nonetheless, according to your entries, you want to post to area 11.
System Response
Using limited transaction types is obsolete and would lead to an inconsistent posting in this situation. The system rejects the posting.
Procedure
Use a transaction type that is not limited. And, if possible, choose the ledger group and/or depreciation area on the initial screen.
According to specific accounting we shouldn't post to one of the depr. area, so most of the tr.types are restricted to post to all areas except this one.
Because of this, posting from MM with acc.assignment 'A' is impossible - I have this error.
Any ideas how to solve?
Thanks in advance

Hi Anton
This looks like your transaction type -130 is limited to post only in ledger group-0N as per the transaction type configuration. Due to which system is unable to post all the ledgers and hence this lead to inconsistency.
Please verify the transaction type 130- in configuration T code - OAYA and see if it is restricted by depreciation area (eventually allow to post only ledger group- 0N.
Tcode - OAYA (Limit Transaction Types to Depreciation Areas)
please verify and let us know the update. hope this helps
Best Regards
Jomon

How to restrict the t code BBPMAININT with DISPLAY Mode in SRM?

Hi experts,
I want to restrict the T code BBPMAININT : Maintain Business Partner with DISPLAY mode in SRM system?
Action Taken:1. I have restricted with "03 Activity" of all check and maintainauthorization objects for this tocde .
2. I have performed the authorization trace also, there also I have not found any new objects.
Here are list of auth object I have restricted:
BBP_FUNCT
BBP_PD_AUC
BBP_PD_BID
BBP_PD_CNF
BBP_PD_CTR
BBP_PD_INV
BBP_PD_PCO
BBP_PD_PO
BBP_PD_QUO
But I have not clearly understand of the object : BBP_FUNCT.
In this Object, I have maintained BE_F4_HELP value only. And rest of the auth object I have restricted to 03 activity only.
But still users are able to acess the CREATE and MANAGE buttons.
So how Can I restrict the this T code in display mode?
Please suggest me...
Thanks in advance.
Regards,
Siva

Siva,
Does your users have any other tcodes assigned to them other than the one you needed to be resticted?
As a trial, assign only your tcode to a user and run the trace.
Let us know your findings.
Regards,
Brahmeshwar

Posting Incoming Payment via T-code: F-28

Hi SAP,
Our users need to post incoming payment via t-code F-28, but when they simulate the
transaction, only 1 line item was appeared and system gave error
message;" please correct the marked line item". Then i correct the line item (fill in business area).
Then, when i enter the next posting for 2nd line item, system gave an
error message: "You are not authorised for company code 9000". Before
this our user can do the posting via incoming payment.This problem only
happened after we upraded the system to ECC.6.
I try check Txn SU53 to display the error message, unfortunately no error was generated by
the system. Please help me. I did ask our local consultant before but they asked me to implement note 727973. we already implemented the note but the problem still happened.
Will give points for those who help me solve this problem.
TQ
Regards,
Nazrul

Now that you are working on a ECC 6.0 the suitable note will be:
"1249923 - FB05: F5 413 for field GSBER for automatically created item".
Please, apply the correction instructions on this note and afterwards the problem should be solved.
Regards,
Lidia

FV11 Restriction at Co.Code level?

Dear MM experts,
I have checked up entire forum for the above subject matter.
Kindly let us know whether FV11 T-code is restricted at Co.code leve.
We have two company codes and userwise we would like to restrict while updating FV11 condition " JMIQ" .
FYI, updating FV11 for key combination " Plant/Vendor/Material"
Requirement is the above condition, User1 has to exclusively update FV11 for Co code 1 & User2 has to exclusively update FV11 for Co code 2.
Kindly help
Thanx in advance.
Srihari

Hi,
You can create a new access sequence for the condition type JMIQ (e.g. co.code/Plant/Vendor/Material) including company code.
While maintening the condition records for the condition you can seperate the the condition values by co.code.
i.e. for Co.code = 0001 the conditon will have 16% and for
Co. code =0002 the condition will have 18% vaue.
Cheers,
Satish Purandare

Authorization based on t.code and screenvariant

All,
Suppose I have created screenvariant in particular transaction .
For eg MB52 , I have created one variant , ZVAR1
Is it possile to give authorization based on t.code MB52 and screen variant ZVAR1?
Or t. code and layout of report.
For eg I have changed the layout and save the report as Z111.
Now is it possible to give authorization ,MB52 and Z111?
Please advise.
regards

Thanks Alex.
Suppose I am creating new t.code for MB52 program .
Now in SE93 which object I should I select :
- program and screen
- program and selection screen
- Method of a class
- transaction with variant
- transaction with parameters
Pls advice.
regards

Organization level authorization restrictions

Hello All,
Please can you let me know
1) f it is possible to org level authorization restrictions for CLM documents and master data without any development?
- E.g. while creating suppliers the user should only be able to create for the Company assigned to the user id?
2) What is the significance of the company and organization unit fields in the user account information page?
Regards,
Subramaniam Iyer

Hi ,
Could you share about your solution ? I think I have face the same problem as yours.

Restrict this transaction code only to create sets starting with 'ZMR'

Hello,
I need to create custom transaction code for 'GS01' and restrict this transaction code only to create sets starting with 'ZMR' No other sets should be allowed to be created.
If anyone have done before with the same scenario. Please give me clear documentation on this .
Reagdrs
Kiran

YOu cannot find the call to the badi's by searching the main program.
The badi is called a t run time.
To find a badi attached to a main program, goto se38,
GIve the program name.
Goto->Object Directory Entry. Find the package.
Go to se18 transaction, Press f4.
give the package name in the popup.
you can get the badis associated with the main program.
Regards,
Ravi

Posting customer collection by transaction code f-34,error message

Hi
while Posting customer collection by transaction code f-34,the system gives an error message" no document posted",So if any one could tell me the which configuration has not been made for that particular customer

Hi,Srikanth Tamma
Actually the user is making the entry from a web service bulit by dotnet,the data from the dot net hits SAP after it gets process in SAP it comes back again to the webservice.After debugging it is found that data is not flowing back from SAP to the dot net web service

Block posting for restricted stock

Dear all,
Currently when perform migo for restricted stock,system only show warning message.
How to block the system to perform any posting for restricted stock?
Thank you

check the message number and change the message category form warning to Error at SPRO: MM > Inventory management and physical inventory > define attributes to system messages.
OR
take ABAP help

Ad-hoc Authorization restricting the user

Hi All,
The users needs to be restricted from Ad-hoc broadcasting the reports using the Bex Broadcasting Wizard.
where can i restrict the broadcast using Authorization restrictions in the user profile?
Can i restrict the user by deactivating Broadcast Tab in the menu ?
suggest me the feasible solutions.
Thanks,
Mike

Hello Mike,
Do you got the solution for the same? Kindly let me know the details as We have same issue at our location
Thanks in Advance.
Regards:Gaurav

Posting authorization restriction in t-code F-02

Similar Messages

Maybe you are looking for