Hi Mylene,
you are correct VA42 has nothing to do with quotation, but I am referring to transaction code VA22 - Change Quotation.
The reason I tried to use authorisation object B_USERSTAT was because I saw in SU24 that it is being checked, however when you run the transaction, and trace, this object is not being checked, and I am not sure that even if this object will be checked it will do what I need it to do.