SRM docs authorization control logic

[Former Member]

1. We test in SRM 7.0 and found SC docs is controled by requestor, It means user A can only see the scs which was created by user A, is it the standard logic?

2. RFx and contract is controlled by SRM GUI tcode: PFCG, the profile we assign the org data, such as pur org and pur group.

Is it the standard control logic? Is it possible to control rfx and contract docs by SRM org plan(ppoma_bbp) not controlled by profile setting(PFCG)?

[Former Member]

To Feng and Masa :

For the first question , I think that is controlled by the purchase group and the purchase organization .In other word , if the user A and B have the same purchase group and the purchase organization,they can see the SC each other . For the team shopping cart ,you must create this kinds of SC before using .And get the setting Purchasing substitutes

2,I think you can control it using the org plan .but need the role help .

Bestregards !

Alex !

[masa_139]

Hi,

1. Yes. There is also TeamCart function in SRM 7.0.

2. It depends on what do you want to controle. Application always checks authorization objects for the user.

Business Transaction Type *

Responsible Purchasing Group *

Responsible Purchasing Organiz *

Activity

01 Create or generate

02 Change

03 Display

04 Print, edit messages

06 Delete

33 Read

C5 Reopen

G7 Reverse

PU Publish

Regards,

Masa