04-22-2009 6:37 AM
Dear Experts
i m facing this critical problem .
experts i have created a Role & assign to the user with restriction of 3 storage location. i want that USER can access only 3 storage location which i have given Not other storage location.
the detail is as bellow
Activity 03 ACTVT
Movement type 311 BWART
Storage location ABC, BCD, XYZ LGORT
Plant 8100 WERKS
But when i m log in with user all the storage location is accessible.
kindly provide the solution
thanks/regards
04-22-2009 7:12 AM
Check the particular user full authorization
User may have remaining (ehich is not provided) storage location in some other roles
If you are restricted from org. level check the object levels also
Check all the manual objects (find field name lgort and check)
Make sure none of the objects are not contain mentioned storage location in none of the roles.
04-22-2009 6:52 AM
Hi,
Please check whether that user is having any other role (may be from that role he/she can access other locations).
you can check by giving auth object with values in SUIM t-code (by giving user assignment)
Please confirm if it works.
Cheers,
Jagan
04-22-2009 7:04 AM
hi
there nay other role assign to the user. i have assign only one role to the user. and the object for storage location M_MSEG_LGO is there.
thanks
04-22-2009 7:10 AM
Hi,
What are the t-codes in the role ?
Also plz check auth objects in the role whether any other instance exist for object M_MSEG_LGO in the role.
Cheers,
Jagan
04-22-2009 7:12 AM
Check the particular user full authorization
User may have remaining (ehich is not provided) storage location in some other roles
If you are restricted from org. level check the object levels also
Check all the manual objects (find field name lgort and check)
Make sure none of the objects are not contain mentioned storage location in none of the roles.
04-22-2009 7:20 AM
hi
i have created a test role and user for this testing...M_MSEG_LGO & LGORT is present only one time.
if u need the t-code i can provide u wht i have given.. i m using mb1b. for this.
thanks
04-22-2009 7:25 AM
hi
The T-Codes are.
CA03 Display Routing
CA70 PRT Where-Used Lists
CA90 Use of Ref. Op. Set in Routings
CO03 Display Production Order
CO04N Print Production Orders
CO09 Availability Overview
CO15 Enter Production order Confirmation
CO40 Converting Planned Order
CO46 Order progress report
COOIS Production Order Information System
CR03 Display Work Center
CR05 Work Center List
CR06 Work Center Assignment to Cost Ctr
CR07 Work Center Capacities
CR10 Work center change documents
CR13 Display Capacity
CR15 Capacity where-used
CR60 Work center information system
CS03 Display Material BOM
CS11 Display BOM Level by Level
CS12 Multilevel BOM
CS13 Summarized BOM
CS15 Single-Level Where-Used List
CS40 Create Link to Configurable Material
IW21 Create PM Notification - General
IW22 Change PM Notification
IW23 Display PM Notification
IW25 Create PM Activity Report
IW28 Change Notifications
IW29 Display Notifications
MB03 Display Material Document
MB1B Transfer Posting
MB24 Reservation List
MB31 Goods Receipt for Production Order
MB51 Material Doc. List
MB52 List of Warehouse Stocks on Hand
MB59 Material Doc. List
MBLB Stocks at Subcontractor
MC89 Sales and Operations Planning
MD04 Display Stock/Requirements Situation
MD07 Current Material Overview
MD4C Multilevel Order Report
ME2M Purchase Orders by Material
ME2O SC Stock Monitoring (Vendor)
ME3M Outline Agreements by Material
ME51N Create Purchase Requisition
ME53N Display Purchase Requisition
ME5A Purchase Requisitions: List Display
MM03 Display Material
MM60 Materials List
MM72 Display Archive of Materials
MMBE Stock Overview
MS04 Planning Scenario: Stock/Reqmts List
MS33 Display planning scenario
VL06F General delivery list - Outb.deliv.
ZBOM_ST BOM with Stock
ZC15 Final confirmation of order
ZCO11 Pratical confirmation of order
ZDSP Sales Despatch Backlog
ZDSP1 Sales Despatch Backlog Report
ZPDF Converting SAP Script to PDF
ZRCARD Route Card
thanks/regards
04-22-2009 7:52 AM
04-22-2009 8:02 AM
If it's a test user remove all the roles and assign only new role which is created for test
And remove org.level values(if the role contain org.level value storage location) and provide the values through only object level and try
If itu2019s working then user have a authorization in some other role.
For T-code mb1b object M_MSEG_LGO is not a mandatory .some time it will call this object background that time we need to add this object manually.
MT 311 is transfer with in plant if you are trying other than this activity it will call mention object in background that time we need to add mention object manually otherwise no need
04-22-2009 8:02 AM
Hi,
why not analyzing the issue?
Start with st01 to see, if the object is checked at all and with which values.
If there are checks for other storage locations and that object and the sy-subrc is 0 for them although the users do nto have that auths, pls check the SU24-settings.
So always ST01 is the entry point.
b.rgds,
Bernhard