12-11-2012 12:22 PM
Hi,
While executing the tcode CKMLCP, the user is able to access valuation areas eventhough he is not authorized for that.The object getting checked is K_ML_VA. While checking the ST01 trace,we found that the missing Valuation area is getting passed.
The user currently has only one role assigned to him which does not have the Valuation areas. Is their any way to restrict the access?
Thanks,
Arjun
12-11-2012 1:30 PM
Hi,
I've not see this before. Note 1286291 may be relevant, has it been applied in your system?
12-11-2012 1:30 PM
Hi,
I've not see this before. Note 1286291 may be relevant, has it been applied in your system?
12-12-2012 4:14 AM
Hi Alex,
Thanks for the reply.We checked out this note but it has already been applied to our system.
Let me know what else information you need for us to resolve the issue.
Thanks,
Arjun
12-12-2012 9:44 AM
Just to cover some of the obvious things, can you confirm that the object hasn't been set as Not Checked in SU24 for CKMLCP. Assuming also that there is no auth for that val area in the user buffer (SU56) for that user then the next step I would try would be to go through the code to identify what is or isn't being passed into the check and see why it is skipping on valuation area. If you don't have ABAP skills then a developer will be able to help you with this.
12-14-2012 10:50 AM
Hi Alex,
Thanks for the inputs. The note that you had mentioned was right, it was a mistake from my side,I checked for the note in the wrong system.
Now Basis team has applied the note and the authority check is working fine. Thanks for your help in resolving this issue.
Regards,
Arjun