Hi,
I have these 2 requirements from the business and need expert opinion on it:
1) My users have this issue wherein SOME users use ML81n to create the SES and then goes to the PO to get the PO line item for the services delivered. It turns out that everyone with the ML81N access are able to change the value/quantity of the Purchase Order.
So what the business wants to do now is to restrict everyone but the Purchase Requisioner to be able to change the line items of the Purchase Orders.
I have tried looking at the authorization objects M_BEST_EKO, M_BEST_BSA & M_BEST_WRK but it seems like it might be tedious since i may have to review the roles again (ie: making sure that only the Purchase Requisioner can make changes but everyone else has display only)
Or would a user-exit be a better option?
2) How to restrict certain users with ML81N from approving/releasing a SES? Would ensuring that activity 75 is not checked in auth objects M_BEST_EKO, M_BEST_BSA & M_BEST_WRK sufficient?
Looking forward to some feedbacks
thanks in advance,
Melissa