Authorization Checks - SAP WM

The authorization concept in Warehouse Management guarantees a smooth and secure organization of warehousing logistics.

Defining Profiles
Profiles contain authorization objects for a limited number of transactions. For example, the profile L_WM_ALL contains all authorization objects for tasks in WM (with the exception of L_ARCH). To define profiles, see Tools Authorization management Create profiles in the Warehouse Management IMG.Detailed information on how to define profiles is also found in "Basis / Users and Authorizations" in the System Administration documentation.

Defining User Authorizations
For each user who requires authorization to carry out tasks in WM, a user master record must be maintained. To define user authorizations, see Tools Authorization management Defineauthorizations in the Warehouse Management IMG documentation.

User Authorization Groups
When configuring WM in Customizing, individual views (partial tables containing specific information) are assigned to authorization maintenance groups that must be included in your authorization concept. These groups are assigned to users using the authorization object S_TABU_DIS. The following authorization groups are applicable to WM:

User Authorization Groups

For authorization checks in WM, the following objects can be assigned selectively for each user:

authorization checksauthorization checks

These authorization objects are assigned to the object class LE_L. You can view them by choosing Tools ABAP Workbench, Development Other tools Authorization objects Objects. The objects S_ARCHIVE and S_DATASET pertain to archiving of WM data. Additionally, there are authorization objects for the ALE interface.

Transfer Order Processing
When creating transfer orders, a high degree of accuracy is attained by combining the authorization check of the objects L_BWLVS and L_LGNUM. If the system allows a certain WM movement type, you can process all storage types when you create transfer orders as defined in the WM table for movement types and/or the table for alternative storage types.

If a storage type is changed manually, the system makes an additional authorization check for that storage type. The check sequence is as follows:

  1. Check for warehouse number authorizations.
  2. Check for storage type.

First the system checks whether the storage type entered is used in the storage type search (Customizing, Strategies). If the storage type is defined in the search sequence, the respective storage type is not checked against the user master. If the storage type is not defined in the storage type search table, the system executes a check against the user master. The object L_SFUNC provides the authorization to call up automatic transfer order processing for material staging using the WM/PP interface and to execute repair programs.

General Usage
Using the object L_TCODE you can limit access to certain Warehouse Management transactions. All WM transactions begin with the letter "L". If you want to work with hazardous materials, you must also include transactions "VM01 to VM03" in your authorization concept.

Calling up the archiving programs is protected by the authorization group L_ARCH (attributes of the reorganization programs concerned). To activate the authorization, you need to add the value L_ARCH to the authorization object S_PROGRAM (system authorization).

Displaying Authorization Groups and Table Views
To display the maintenance area assignments for WM tables and views that are delivered with the standard system

  1. Choose System Services Table Maintenance
  2. Enter tddat in the Table field and choose Table Display
  3. Choose Assign authorization groups to tables/views.
  4. Choose Table name and/or Authorization Group.
  5. To display the WM table views together with the authorization groups and view descriptions, enter the following in the Table name field:
  6. - v_t30*
    - v_t31*
    - v_t32*
    - v_t33*
    - v_t34*
    - v_t646*

  7. To display the WM authorization groups, enter WMA, WMC, WMC1 or WMS in the Authorization group field. (If you are updating your system from a previous version, you can also enter LC in this field.) Choose ENTER..You can also display authorization area assignments for WM tables and views using the data dictionary information system.

All rights reserved © 2018 Wisdom IT Services India Pvt. Ltd Protection Status

SAP WM Topics