Authorization object for KKE1, KKE2 and KKE3

[Former Member]

Hello,

is it possible to restrict KKE1, KKE2 and KKE3 to plant level. I have 7 plants in the same controlling area.

Regards

[Former Member]

Hi Robert,

if you are already having these transactions in a role then go to org levels and specify which plant you want these t codes to work. you should maintain these vales in werks.

cheers,

Kanth

[mvoros]

Hi,

those transactions perform only check for object K_CKBS which has only controlling area. So by default it won't perform check on plant. You could enhance routine D1000_AUTHORITY_CHECK to perform additional authorization checks.

Cheers

[Former Member]

Martin,

Do you have more information about how I add additional authorization checks?

[Former Member]

Hi,

Yes it possible.

Firstly, u need to find a suitable Authorization Object for restricting Plant Level.

Then check with your abaper to deug the program and input the Authority Check Statements for the Plant Authorization Object.

Add the Plant Level Authorization Object in SU24 and set the Check Value to YES. This is prompt for Plant Infomration while creating a role for Transactions KKE1, KKE2 and KKE3.

Regards

[Former Member]

WRT from feedback from sumanth you can add this authorization object M_MSEG_WWA. maintain what plants you want in werks