Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

VKM4 - Passing V_VBAK_AAT check when profile does not authorize it

Former Member

‎09-23-2009 3:54 PM

0 Kudos

A user is using the VKM4 transaction. When they access a financial document they get a "not authorized to run VA02 error". This is correct since they do not have the '02' ACTVTY for V_VBAK_AAT in their profile.

However, there is a check that looks at this auth object and should shift them to VA03 instead. (which the users are authorized to use.) However, a trace is showing them as passing the authorization check with a 02 ACTVTY value.

None of their security roles give them this authorization. Each profile with the V_VBAK_AAT authorization object in it grants them '03' (Display) access, but none of them grant '02' access.

- Kurt

1 REPLY 1

Former Member

‎09-23-2009 4:28 PM

0 Kudos

Two SAP Notes 0000369290 and 0000406055 essentially describe the check as disabled in VKM4 since otherwise it would cause as issue with the user being allowed to release documents unless given the 02 ACTVTY to do so.

A Catch-22 issue if you want someone with release ability to be limited to VA03 access to the financial document.