Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

CRM_ORD_OP - Auth to own documents CRM Security

Former Member
0 Kudos

Hi all,

In CRM, I built a role that should allow a sales rep( to whom the role is assigned) to display only the documents created by him using the CRM_ORD_OP authorization object . But when he clicks on the search button he is able to display all the documents which are not created by him also.

Thanks.

Neha

1 ACCEPTED SOLUTION

Former Member
0 Kudos

Neha,

1. First ask him which transaction he is using

2. In SU24, note down the objects with status check/maintain.

These objects you need to maintain with appropriate values in his role.

The restriction level depends on the precise values and combination of ranges for objects for these authorization values.

3 REPLIES 3

Former Member
0 Kudos

Neha,

1. First ask him which transaction he is using

2. In SU24, note down the objects with status check/maintain.

These objects you need to maintain with appropriate values in his role.

The restriction level depends on the precise values and combination of ranges for objects for these authorization values.

manohar_kappala2
Contributor
0 Kudos

Hi Neha,

Refer to the following URL

<a href="http://help.sap.com/saphelp_crm50/helpdata/en/4a/b9f63a8ab2c745e10000000a114084/content.htm">Controlling options in CRM</a>

Perhaps you might need to try with the following values and see if he is still able to get access to others documents.

Apart from this try to see if the User getting hte access form some other role assigned to the user in that case u can run a trace and compare the values with

RC=0 which means that he is having access to these authorizations.

Lastly sometimes the SU24 Check is inactive make sure that its in either C(check) or CM (check/maintain) mode

Perhaps this is what the user needs accesss to.

A user wants to keep the authorization to process a document in which he himself is entered as the employee responsible.

You assign the following authorizations:

CRM_ORD_OP: PARTN_FCT ‘’, PARTN_FCTT ‘0008 ’, ACTVT ‚

hope this helps..

Regards,

Manohar

Former Member
0 Kudos

You need to implement ACE.