on 05-25-2016 2:41 PM
Hi all
Since we patched our systems (NW 731 SPS13, MDG 6.1) we have a subset of users (foreign vendors) that no longer have access to the edit (pencil icon) for the vendor in order to amend bank account details - please see the icon in the bottom left hand corner of the screenshot. It is 'greyed out' i.e. cannot be clicked on.
We know this is auths related (I guess SPS13 bought in some extra security?) as if we add a 'Master' role we have to the user account, the edit button is then available, and they can make the necessary changes.
However, this 'Master' role grants the user "too much" access and it's inappropriate from a business/process/security.
What we need to do is isolate the authorization object that relates to this edit button.
We tried to trace this but were unable to capture.
I've been analysing the different objects in the Master role and it seems we needed to add:
F_LFA1_AEN VGRUP *
S_TCODE TCD XK02
However, this hasn't quite done the job. What else do we need?
Do we need F_KNA1_AEN too? Although that seems to be specific to customers, not vendors.
We seem to have the correct access (activity 02 to *) for F_LFA1_APP & F_LFA1_BEK... anything else we need?
Thanks
Ross
Hi Ross,
Just go to 'Configure Properties for CR step'
Select Change Request Type
Step --> Entity Type per Change request.. Check the Field Property is Standard or Not Relavent.. and try and make it Standard..
Thanks,
Cherry.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
I went into MDGIMG General Settings
Process Modeling
Change Requests
and I found Configure Properties for CR step' but not sure what needs to be done after that? The "Entity Type per Change request step" is highlighted and there is a list of "type of change request" and "description". There is nothing about Standard or Not Relevant...?
User | Count |
---|---|
88 | |
23 | |
11 | |
9 | |
8 | |
5 | |
5 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.