Restrict a role no longer possible to edit O-objects in PPOME

[Former Member]

Hi,

I am new to HR authorization, but I work a lot with normal SAP roles and authorization.

Here we have a requirement to restrict a role so that it is no longer possible to edit O-objects in tcode PPOME.

But It must be possible to view and read all O-objects, but not edit them.

Also this role should still be able to add and edit S-objects.

Could you please help me in this.

Regards,

Shylesh

[jurjen_heeck]

I think you should start by reading documentation on object PLOG. Here's a starting point: http://help.sap.com/erp2005_ehp_02/helpdata/en/fe/73ba3bd14a6a6ae10000000a114084/frameset.htm

[Former Member]

Hi,

Thank you for your information. Following are the different verstions of PLOG. But removing the 'O' object from OTYPE and adding it in new PLOG with PPFCODE 'DISP' does not helped me to solve the issue. Does anyone experienced such issue?

Version07

Infotype 1000

Planning Status *

Object Type C, O, P, S, T, US

Plan Version *

Function Code DISP, LISD

Subtype *

Version08

Infotype 1001

Planning Status *

Object Type *

Plan Version *

Function Code *

Subtype *

Version09

Infotype 1008

Planning Status *

Object Type S

Plan Version *

Function Code *

Subtype *

[Former Member]

Hi, I close this thread