Dear Masters,
I am facing an issue while defining Roles for Users in case of PM Module.
My Scenario is:
1) I have a group of users who can create Orders only with certain order Types (say PM01, PM03, PM05, PM07, PM08 -- In this they cannot create orders with Order Types PM02, PM04 and PM06 as they are mentioned in other Roles for Department HOD).
2) This set of users can change/ Display orders with all Order Types.
I have created separate roles for Create (IW31), Change (IW32/ IW38) and Display(IW33/ IW39).
Individually these roles are working perfectly fine but, once I assign all the three roles, the user gets the right to create restricted order types too.
I have studied all the three roles and found the problem that there is one Authorization Object I_AUART - PM: Order Types with fields AUFAR - Order Type and IWERK - Plant common in all the three roles which is giving the permission for all order types.
If I am trying to remove this authorization Object, it is restricting me in change and display also.
I want to know if there is any authorization object with Order Type, Plant and T-Code.
Please do guide.
Chin2.