Display/change data in credit management

When you process blocked Sales & Distribution (SD) documents (VKM1), the accounting clerk has only the authorization for displaying (and not for changing) certain FI credit management data (authorization objects F_KNKA_MAN, F_KNKA_KKB). However, the Transaction 'Customer Credit Management Change' (FD32) is always called up via the menu option 'Environment'. Since the accounting clerk only has the authorization for displaying certain data, the corresponding error message is also generated correctly. For the display of data only, you must therefore always use a new mode for calling up the Transaction 'Customer Credit Management Display' (FD33).

Solution
If an accounting clerk has only the authorization for displaying credit management data (authorization objects F_KNKA_MAN, F_KNKA_KKB), after calling Transaction FD32 the system changes automatically from 'Blocked Sales & Distribution (SD) documents list' to the display Transaction FD33. As a result, a new mode becomes unnecessary. This solution only makes sense if the authorizations in the credit management Transactions (FD32, FD33) were restricted by the mentioned authorization objects. If a user has no authorization for Transaction FD32 the source code changes will not be successful, because the authorization check for a certain transaction (authorization object S_TCODE) is not performed in the called transaction, and therefore no reaction from the called transaction (like automatic calling up of the display transaction) can be expected.
We recommend to solve the problem as follows: You should not remove the authorization for Transaction FD32 from users, but restrict the authorizations in Transaction FD32 through usage of the mentioned authorization objects.

No comments: