Authorization to a program but not to its transaction
We have the following scenario and we do not know how it must be solved.
We have created a Z transaction to control material creation. With this transaction users can create materials in a simple way, they indicate just a little group of values and the program determines the rest. This means that they do not need to access MM01 to create a new material and we don’t want them to have authorization to that transaction. The problem is that if we do not give them authorization to MM01, the program does not work.
Is it possible to give them authorization to create materials avoiding authorization to MM01?
Thanks in advance.
Zhou Tsui replied
You could add the underlying objects of MM01 to a role. This way, they'll have access to the MM01 functions without actually having acces to tc MM01.
Below are a few authorization objects which are most probably checked in MM01. It's best to use a trial & error since you only use a limited set of fields in the BAPI, so not all objects are necessary.
|C_AENR_BGR||CC Change Master - Authorization Group|
|C_AENR_ERW||CC Eng. Chg. Mgmt. Enhanced Authorization Check|
|C_AENR_RV1||CC Engineering change mgmt - revision level for materials|
|C_DRAD_OBJ||Create/Change/Display/Delete Object Link|
|C_KLAH_BKL||Authorization for Classification|
|C_TCLA_BKA||Authorization for Class Types|
|C_TCLS_MNT||Authorization for Characteristics of Org. Area|
|M_MATE_BUK||Material Master: Company Codes|
|M_MATE_LGN||Material Master: Warehouse Numbers|
|M_MATE_MAN||Material Master: Data at Client Level|
|M_MATE_MAR||Material Master: Material Types|
|M_MATE_MAT||Material Master: Materials|
|M_MATE_MEX||Material Master: Export License Data per Country|
|M_MATE_MZP||Material Master: Customs Tariff Preference Data|
|M_MATE_NEU||Material Master: Create|
|M_MATE_STA||Material Master: Maintenance Statuses|
|M_MATE_VKO||Material Master: Sales Organization/Distribution Channel|
|M_MATE_WGR||Material Master: Material Groups|
|M_MATE_WRK||Material Master: Plants|