Authorizations on Sales Transactions

[former_member270678]

Hi

I have been reading lot of articles in forums about restricting what a user can do in Webclient on Business transactions.

I have requirement to do the following in webclient UI. We are using SAP CRM 2007.

User can only view (Display) only on sales transactions -TA.

User cannot view/edit sales transactions that do not belong to different sales organizations.

user cannot create any new sales transactions.

This user is assigned to a Sold-To party as contact person on BP. So this user cannot view/edit sales transactions beloging to other sold-to partys.

I have tried a lot using following objects in PFCG but have not been able to.

I also looked at the link http://help.sap.com/saphelp_crm70/helpdata/EN/48/a44236ceb873e8e10000000a42189b/frameset.htm

I have tried customizing objects.

CRM_ORD_OP

CRM_ORD_LP

CRM_SAO

CRM_ORD_OE

But I have not able to achieve any of the above.

Example I tried to customize CRM_ORD_OP...I did display only, but I am not able to get it work.

The user can create/Edit transactions in webclient UI. I am not sure what wrong I am doing.

Any pointers would be greatly appreciated.

Regards

[Former Member · Accepted solution]

Hi,

Do you read this document?

How To Guide: PFCG Roles and Authorization Concept

http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/00515e75-f1d0-2c10-bebb-e5675f470ee6

and this:

Leveraging SAP Territory Management for Effective Visibility on Transactions

http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/c0dba3d0-7853-2d10-8da7-a72a23e6daba

Denis.

[amarnath_kathi]

Jimmy,

Implement Access Control Engine (ACE) to solve your requirement. Refer to[ this blog |/people/boris.dingenouts/blog/2006/09/18/the-concept-and-implementation-of-crm-ace ]for details on how to restrict access based on criteria like sales organization and display/change authorizations.