05-15-2012 8:15 AM
Hi,
We have a scenario where there are 2 analysis authorizations
ZA:SA1- with company code 100 and purchasing organization SA1
ZA:EU1- with company codes 500 and 550 and purchasing organization EU1 and EU2
both Company code and pur. Org are authorization relevant
When these analysis authorization is assigned to a user, and a user executes the query, the user gets,error:"insufficient authorization"
The analysis authorization works as below:
CC:100,500,550
PO:SA1,EU1,EU2
the first analysis authorization is checked, which is CC:100 & PO:SA1 , the reulst i authorized
In the second check, the complete authorization is again taken in to account
CC:100,500,550
PO:SA1,EU1,EU2
The second analysis authorization is checked, which is CC:500,550 and PO:EU1,EU2, the result is authorized
the analysis auhtoirzaion keeps on giving error as it is checking for the below combination which is not available in any of the analysis authorization
CC:100 & PO:EU1,EU2
CC: 500,550 & PO:SA1
SAP suggested that it works as above because it is two dimension
The solution for this could be, clubbing all the values in one analysis authorization
and the other solution could be using the user exit
But the above solutions are not being aproved in our org
Is there any other alternative solution for this problem
Version: SAP Netweaver 7.3
appreciate your answers
Regards,
Message was edited by: Meraj Mohammed
05-15-2012 8:38 AM
Hi Meraj,
I believe you can add a Variable of processing type "Authorization" in the query (uncheck 'ready for input' so that users cannot change the values determined by the variable) so as to select the values of company code and purchasing org as per the executing user's AA & use the same as input for the query.
Thanks
Sandipan
05-15-2012 8:56 AM
Hi Sandipan,
Thanks for your reply but we tried this way, it does not work and moreover there are around 20-30 companycodes and the business it not ready to accept this way. In the query input, they provide the vendor number and the qurey shows the result for it from the infoprovider restricting it for comp code and purchasing org since they are set to processinng by authorization.
Regards,
05-16-2012 3:00 AM
Meraj,
Instead of just two AAs, please try having everything in a separate AA
ZCC:100
ZCC:500
ZCC:550
ZPO:SA1
ZPO:EU1
ZPO:EU2
Regards
05-16-2012 8:14 AM
05-17-2012 12:07 AM
Meraj,
This is quite strange, based on examples in SAP note 1000004, PO authorizations should merge because they differ in no more than one dimension. and then can combine with CC authorizations to fill empty dimension there by giving the combination
CC:100 & PO:EU1,EU2
CC: 500,550 & PO:SA1
Only other way I can think of is have one CC auth and one PO auth
CC:100,500,550
PO:SA1,EU1,EU2
these will combine and give you access to the entire union.
Regards,
Shivraj
05-16-2012 5:14 PM
Did you run a trace yet to identify the authorizations? These are relant org values and are being used else where already?