That is a custom authorization object and not a standard SAP one, right? My guess, in that case, is that the code that implements that auth object, presumably in a user exit or BAdI in VA02, is incorrect. That must be your code - time to speak to the person that wrote it?
Steve.
