Security Object BBP_PD_PO Activity 02 (Change) Required to Approve a PO?

[Former Member]

We have managers who should be able to approve local SRM purchase orders, but they should not be able to change the local SRM PO's.

It seems that SAP has made it a requirement to grant security object BBP_PD_PO Activity 02 (Change) in order to approve the purchase order.

This is a problem as this same user has the ability to search PO's using the advanced search feature and they are now able to make changes the the local PO's.

Is there a way to allow for the user to approve without giving them the ability to change purchase orders?

[Former Member · Accepted solution]

Is there a way to allow for the user to approve without giving them the ability to change purchase orders?

When the approver approves the PO, he/she is effectively changing the PO by changing the status of it. Hence the inclusion of the "BBP_PD_PO Activity 02" authorization object.

However, if you don't want the manager/approver to change the PO from POWL, you could control some change related buttons such as "change", "order", etc by controlling actions (buttons) from IMG. Most likely you'd have to implement your own dynamic class/method to check roles, etc for those buttons.

[Former Member · Accepted solution]

Hi Jay,

Thanks for the reply. I was afraid that was the case. We did not want to do any developments for this issue and were hoping that there was a way via security to handle this problem.

[Former Member · Accepted solution]

HI Paul,

How did you end up solving this requirement / issue?  I have the same question.

cheers,

AD