Restricting user based on Delivery Block in VA02

Hi ,
     As per my bussiness team I am suppose to restrict the user  depening on delivery block in transaction VA02 .There are no SAP pre-defined feilds to restrict at delivery block level from PFCG .Please kindly help .Thanks in advance .

Hi,
Can you please assist, with the Issue below?
1)     Tcode : VA02
2)     I have created authorization Object for field level authorizations for
Delivery Block   --- LIFSK
Billing Block  -
  FAKSK
                           Maintained Field Level SD Authorizations                                ZV_FIELD
Maintained Field Level SD Authorizations                                T-ED49128000
                    Activity                       02, 03                                                                      ACTVT
                    Billing block in SD document   Z3                                                                          FAKSK
                    Delivery block ( document heade ZH                                                                          LIFSK
3)     Now I want to restrict to a particular Delivery Block and  a Billing Block, but I am able to change to other  Delivery Block and Billing Blocks even though I have restricted to Z3 and ZH ( this case)

Similar Messages

  • How to restrict  delivery Block in va02 for various users

    Dear  Experts
    I am suppose to restrict the user depening on delivery block in transaction VA02 .There are no SAP pre-defined feilds  authorization Object to restrict at delivery block level from PFCG ,and I have Created manually authorization object and class in Tcode Su21 and Su20  with table VBAK but its not giving any change .
    Please kindly help
    Thanks in advance
    krishna

    Hi
    We have a very complex Billing block functionality. The sales orders are handled at many levels and when the process is completed at one level, they need to change the billing block to another one and the system will allow to change the block to the specified one only and not to any other block. There is a control in the code to restrict the allowed blocks.
    We also maintain a Ztable with list of users (few super users/process primes and key people) for whom system will allow to remove/change to any other block as they wish.
    In your case, if it is not possible through authorisations, then the best way is to handle the requirement through a Ztable for the users allowed to change the delivery block. This is one of the possible alternatives.
    Thanks,
    Ravi

  • FD32 restrict users based on a schedule of authority

    All,
    I have a requirement within FD32 to restrict users based on a schedule of authority.  For example, only allowing credit limits to be changed in a user's authorized dollar range.  I was able to restrict the Credit Limit field (change/display) by using field groups, but I have an extension of the requirement for a schedule of authority.  Can someone please  help?

    You could use F_KNA1_BED, I guess - but that would mean excessive maintenance of both: BEGRU and customers, if I understood your scenario correctly and you really, really want to break that down to single customers.
    It would be even more excessive to utilize F_KNA1_GRP. Can be done, though.
    Both solutions are completely un-elegant and I am not happy proposing them. But I am curious as a cat: what exactly is the business process expecting you to restrict access to customer data down to a single customer?
    Edited by: Mylène Dorias on Mar 24, 2010 8:39 AM

  • Restrict users based on Customers

    Hi ,
    In ECC system, we have general requirements to restrict users based on customer account group where customer account group is represented as Site/Store.
    Possible values for Customer Account group -
    - Reference Store
    - Head Store
    - Wholly Owner Store etc.
    Till this point everything is fine. However, Client has few additional External Stores which are represented as one Dummy Site and Customers belonging to that store are actual external Stores.
    Example, we have additional Value for Customer Account Group -
    - Dummy Site
    And now all the Customers part of dummy site is actual stores and we are needed to drill down our restriction to this Customer (So called Stores).
    To restrict used based on customer account group/Stores, we can utilize F_KNA1_GRP with filed KTOKD (Customer Account Group). However, is it possible to create roles based on individual customers of these Stores?
    If yes, how can we do that? 
    P.S. I had a look at authorization object F_KNA1_BED with filed BRGRU. Can this object help us in fulfilling our requirement? Or there is any other SAP provided authorization object which can help us to restrict on Customer values?
    Thanks,
    Sheenam

    You could use F_KNA1_BED, I guess - but that would mean excessive maintenance of both: BEGRU and customers, if I understood your scenario correctly and you really, really want to break that down to single customers.
    It would be even more excessive to utilize F_KNA1_GRP. Can be done, though.
    Both solutions are completely un-elegant and I am not happy proposing them. But I am curious as a cat: what exactly is the business process expecting you to restrict access to customer data down to a single customer?
    Edited by: Mylène Dorias on Mar 24, 2010 8:39 AM

  • Restricting Users based on GL Authorization Group

    Gurus,
    I have got requiremnt from our finance consultant/team for restricting users from accesing particular GL accounts in a company code. There are some GL which users are not supposed to view.
    We have created authorization group in FS00 -Control data , but we cannot see that group in object F_BKPF_BES(Account authorization for GL accounts).
    Please help.
    Regards

    Hi,
    Step1: Create Tolerance Groups
    Step2: Assign Users to Tolerance Groups
    Step3: Remove/Add T Codes in Users Master Data (T Code: SU01)
    Thanks
    Chandra

  • Is it possible to restrict user based on personal information workset ?

    Hi Experts,
    I have a requirement in which I need to allow other worksets in ESS to be accessed only if one workset "Personal Information" is completed.
    In this workset "Personal Information", there is an iView "Certify Own Data". In this ivew there are couple of checkboxes which need to be ticked and saved. this checkboxes will automatically be checked when the user enters required data in other related ivews such as "Address", "Family Details", "communications" etc.
    All I want to achieve is to allow the user only if he fills all his personal information and certify's his own data. After clicking on SAVE button only he would be able to access other worksets such as "Attendence".
    Please someone suggest me how to achive this functionality. Do i need to develop new application or i can achieve this functionality by just maintaining some kind of iview validation.
    Earlier response would be much appreciated.
    Thanks
    Uday

    you can do a badi validation
    BADI HRPAD00INFTYBL and HRPAD00INFTYDB for new framework of  infotype.
    Please refer the SAP Note 864910 BADI HRPAD00INFTYBL and HRPAD00INFTYDB
    But to control the workset would be difficult in standard, probably you can do a modification
    you can control services using proxy classes though

  • Schedule Background Job :  Remove delivery Block in Sales order

    Hi Gurus,
    I have a requirement to select all sales orders as per a condition and remove delivery block at
    VA02-> Go to -> Header -> Status
    For that I have to write a program which will be run only in background and i have to schedule background job for the same.
    I have a parameter at selection - No of records
    If no of records = 500 , I have to submit 500 jobs ie one job each for each sales order for removing delivery block.
    I need to know
    1) Which function module/bapi I can use to remove delivery block at sales order header level.
        For blocked delivery the status is 'BSTK" . to remove block i need to change status to "RSTK".
    2) How to schedule a background job for my program and how to submit one job each for each sales   order.
    Regards
    Avi.

    Hi Avi,
    Would like to seek for your advice. I am facing the same scenario too which is to delete the delivery block but is deletion of the delivery block is done in the user exit MV45AFZZ. The subroutine which needs to have the extra logic of deleting the delivery block is USEREXIT_SAVE_DOCUMENT_PREPARE.
    Need your advice on how do you solve this scenario? Thanks in advance.

  • How to determine that the Delivery Block in SO is removed manually

    Hi,
    Is there any way to determine if the delivery block is removed manually? Because initially on VA01 we are defaulting the delivery block. Then in VA02, if the user removed the delivery block then save, then goes back to VA02 again, in this, I need to determine that the delivery block was removed manullay.
    Regards,
    Mawi

    Hi,
    You can check out in environment->changes ..you can determine the manual changes made to the order...
    Thanks,
    Shailaja Ainala.

  • Delivery block field greyed out

    Hi,
    Experts I am working for a US client and come across the following error:
    For a Particular Line Item ...The user is trying Add Delivery Block in VA02 but can't add...all the options showing in Greyed...
    Please guide me as what can be the possible ways to get the solution for the same.
    Thanks and regards,
    Anshuman chakraborty

    Hi
    Kindly check if there is subsequent document. If there is subsequent document then it will be grayed usually.
    Check and revert

  • How to Restrict users to change password

    Hi All,
     I would like to restrict user to change password only defined number of times in a day, Is it possible to do it through group policies.
    Please note i am already aware of "Minimum Password age" feature, however i do not want to use it as the minimum value that i can set here is 1 day. I would like to restrict users based on password reset threshold e.g. User can reset his password
    in a day only twice or thrice.
    Thanx & Regards,
    Wasim Parkar

    If you want to limit the user to have his/her password changed for a specific number of time every day, I have to say
    NO thats not possible. PSO's as other mentioned,can be used to have different password policies. Maybe you can set the msDS-MinimumPasswordAge
    to 00:04:00:00 which is equal to 4 hours. It means every 4 hours a user will be able to change his/her password. So in each day a user can change the password 6 times, since a day is 24 hours.
    Do not forget a day start from 00:00 AM up to 11:59 PM. So in a 9 to 5 job, a user may change the password 2-3 times.
    Hope it helps.
    Mahdi Tehrani Loves Powershell
    Please kindly click on Propose As Answer or to mark this post as
    and helpfull to other poeple.

  • Delivery block - Credit Management

    Dear Expert,
    Please find the scenario below
    We are using simple credit check for a sales document type
    There is a delivery block when credit limit exceeds, then we remove the delivery block in VA02.
    Now, we created three sales order for a customer, the block is automatically released in sales order.(Before saving the sales order it shows the delivery block due the credit limit exceeds)
    Please suggest what could be the reason for this
    Regards

    Hi
    Please check the Payer customer credit details in FD32 trasaction.
    If you are using Simple credit with Check credit C for a perticular sales document type then I do not see any reason that it won't work and block Sales doc type even if - credit limit of customer exceed .
    What is the risk Category for Customer is it Low risk ?
    Cheers

  • Field "delivery block" (VBAK-LIFSK) to be disabled for few users

    Want to disable field "DELIVERY BLOCK"( VBAK-LIFSK) in t-code VA01 & VA02  for few users while creation and changing Sale Order.
    How to do it?
    Arul Murugan

    Hi,
    1. This can be achived by screen varient. t Code SHD0.
    2. Through Authorization you can restrict user from removing the delivery block. but u can not restrict them to insert the delivery block.
    for resrict from release check in authorisation role.
    Object :  V_VBAK_AAT
    Activity : Deselect the "43" acivity.

  • Delivery block based on incoterms

    Hi all,
    In standard SAP, is it possible to set a delivery block if a certain incoterm is selected in the sales order?
    Thanks

    You may need to use user exit. I don't find any settings for delivery block based on inco terms. Use either USEREXIT_MOVE_FIELD_TO_VBAK (header level) or USEREXIT_MOVE_FIELD_TO_VBAP (item level) in program MV45AFZZ to fulfill the requirement.
    Regards,

  • Delivery Block Based on Payment Card validity.

    Dear SAP Gurus,
    We are working on a scenario, where in we need to block the delivery based on the payment card validity date, which is given in sales order.
    The requirement here is, for eg. If a sales order is created during the payment card validity period, usually the partial deliveries referring the same SO. So if the card validity is over before the quantity is fully delivered, system should block the remaining qty for Delivery.
    The system is proposing a status block initially while trying to do the delivery, but once the block is released the delivery can be done even after the validity expiry date.
    Is there any standard process to block delivery based on Payment card Validity expiry date automatically.
    Please advice
    Thanks & Regards
    PG

    Hi Mr. PG,
    Put the payment method as P - Payment card in customer master.
    Enter the payemnt card detail in customer master in genral data page.
    Use user exit or create a program which check the validty date of payment card and if it is expired then put the delivery block in the customer master.
    Hope this helps.
    Regards,
    MT

  • User Exit for VA01 - Delivery Block

    Dear Friends
    I wanted to do a User Exit for VA01 which should set the Delivery Block = Credit Memo as default for a particular user.
    Can anyone give me the solution.
    REg
    S.K.Raj

    Hi Kamaraj,
    First of all u have to find out the perticular exit for make the changes, after that take one field TBTKZ which is flag for decit /credit memo. Based on the condition that flag set as 'X'. If that flag set as 'X' then populate the data.
    Here it ishow to find out the user exit.
    execute the following report and enter the t-code VA01 it will display all the exits. then search them by seeing coments..
    report zuserexit no standard page heading.          
    tables : tstc, tadir, modsapt, modact, trdir, tfdir, enlfdir.          
             tables : tstct.          
    data : jtab like tadir occurs 0 with header line.          
    data : field1(30).          
    data : v_devclass like tadir-devclass.          
    parameters : p_tcode like tstc-tcode obligatory.          
    select single * from tstc where tcode eq p_tcode.          
    if sy-subrc eq 0.          
       select single * from tadir where pgmid = 'R3TR'          
                        and object = 'PROG'     
                        and obj_name = tstc-pgmna.     
       move : tadir-devclass to v_devclass.     
          if sy-subrc ne 0.     
             select single * from trdir where name = tstc-pgmna.     
             if trdir-subc eq 'F'.     
                select single * from tfdir where pname = tstc-pgmna.     
                select single * from enlfdir where funcname =     
                tfdir-funcname.     
                select single * from tadir where pgmid = 'R3TR'     
                                   and object = 'FUGR'     
                                   and obj_name eq enlfdir-area.     
                move : tadir-devclass to v_devclass.     
              endif.     
           endif.     
           select * from tadir into table jtab     
                         where pgmid = 'R3TR'     
                           and object = 'SMOD'     
                           and devclass = v_devclass.     
            select single * from tstct where sprsl eq sy-langu and     
                                             tcode eq p_tcode.     
            format color col_positive intensified off.     
            write:/(19) 'Transaction Code - ',     
                 20(20) p_tcode,     
                 45(50) tstct-ttext.     
                        skip.     
            if not jtab[] is initial.     
               write:/(95) sy-uline.     
               format color col_heading intensified on.     
               write:/1 sy-vline,     
                      2 'Exit Name',     
                     21 sy-vline ,     
                     22 'Description',     
                     95 sy-vline.     
               write:/(95) sy-uline.     
               loop at jtab.     
                  select single * from modsapt     
                         where sprsl = sy-langu and     
                                name = jtab-obj_name.     
                       format color col_normal intensified off.     
                       write:/1 sy-vline,     
                              2 jtab-obj_name hotspot on,     
                             21 sy-vline ,     
                             22 modsapt-modtext,     
                             95 sy-vline.     
               endloop.     
               write:/(95) sy-uline.     
               describe table jtab.     
               skip.     
               format color col_total intensified on.     
               write:/ 'No of Exits:' , sy-tfill.     
            else.     
               format color col_negative intensified on.     
               write:/(95) 'No User Exit exists'.     
            endif.     
          else.     
              format color col_negative intensified on.     
              write:/(95) 'Transaction Code Does Not Exist'.     
          endif.     
    at line-selection.     
       get cursor field field1.     
       check field1(4) eq 'JTAB'.     
       set parameter id 'MON' field sy-lisel+1(10).     
       call transaction 'SMOD' and skip first   screen.
    Hope this helps you..
    Regards,
    Kumar.

Maybe you are looking for

  • Login of one user at a time

    When having different network admin, what will be the configuration/settings on the ACS to set one at a time login onto the cisco device? So that when a user already logged into the device, other users attempting to login will be blocked.

  • Ipod Shuffle connected but error (Cannot read or write on device)

    Hello, My Ipod Shuffle 2 is connected to my Itunes on, I can create the name and everything seems fine. When I try to transfer songs, Itunes is showing that it is synchronizing and then I get an error message saying it cannot read or write from the d

  • Third Party X-Fi Mode Switching Softw

    I recently ran across an issue which is documented in this thread: http://forums.creative.com/creativelabs/board/message?board.id=soundblaster&message.id=53809 What I found out raised an interesting possibility: it should fairly easy to make software

  • Error received when trying to remove a BW bookmark

    Hello All, When trying to remove a BW bookmark with hierarchy for the Month/Year the following error is received: "System error in program SAPLRRK0 and form SORTING_PRUEFEN_01-04-" Please advise. Regards, Keith

  • Itunes will not install, so I cannot get my phone synced

    I uninstalled my previous verson of Itunes and quick time and I even ran the the microsoft install cleaner, but I still get an error message when I try installing. The error message: the installeer encountered errors before iteunes could be configure