Plant and Movement type Auth issue

[Former Member]

Our requirement is as follows

The user needs to be

authorized to movement 501,502 in plant 4101 and 4100

and to movements 262 in plant 4100 only

so we created and assigned following roles to the user.

test-role-4100 with Movement type 262 and plant 4100

test-role-MT501 with Movement type 501,502 and plant

4100,4101

But still user is able to create document with mov.type 262 in plant

4101

[jurjen_heeck]

Are the fields movement type and plant in the same object? If so, which one?

[Former Member]

Plant is in Org Level in role.

Movement type is in following objects

M_MRES_BWA

M_MSEG_BWA

M_MSEG_LGO

[jurjen_heeck]

Looks like M_MSEG_LGO should cover your needs as this one should be able to restrict activity combine with plant and movement type.

Maybe this object is not (properly) checked by the transcation(s) you use.

Best go through the process with a trace running and see if this object is actually checked....

[Former Member]

Hi Nilesh,

Please check the link below, similar to your requirement:

[link|]

Regards,

Subbu

[Former Member]

Hi Nilesh,

if ur using tcode MB02 use M_MSEG_BMB to control access to the movement type and M_MSEG_WMB to control access to the plant

regards,