Ansicht
Dokumentation

Easy Authorization Management for SAP

F_ACDOCA_C - FIN Authorization Context for DCLs

Vendor Master (General Section)   TXBHW - Original Tax Base Amount in Local Currency  
This documentation is copyright by SAP AG.

Definition

The universal journal is the basis of an integrated accounting system in which financial accounting and management accounting data are recorded in a single chart of accounts. Since all financial data is based on the same line items, no reconciliation between financial accounting and management accounting is ever required.

Permanent reconciliation is achieved by bringing together the following components:

·,,General Ledger Accounting (FI-GL)

·,,Asset Accounting (FI-AA)

·,,Controlling (CO)

·,,Profitability Analysis (CO-PA)

The universal journal is integrated only with account-based profitability analysis. It is not integrated with costing-based profitability analysis. However, costing-based profitability analysis can be run in parallel.

·,,Material Ledger (CO-PC-ACT)

Even though the data is stored in a universal journal entry (table ACDOCA), and only one virtual data model applies, different end users with different business roles need to access the same data with different authorizations.

A general ledger accountant, for example, might want to view all data of a certain company code in the financial statement, whereas a cost accountant, for example, should only be able to see certain cost centers. To enable this, different authorization contexts have been introduced. Depending on the authorization context, the system checks a different set of authorization objects. If you want to see in detail which authorization objects are checked, start ABAP eclipse or transaction SE80 to view the different Access Controls, for example I_GLAccountLineItem.

The authorization context is set via this new authorization object (F_AcDocA_C).

When you are creating roles, please make sure that you assign only one authorization context to each business role.

If a user gets multiple roles with different authorization contexts assigned, he will get a combination of all authorizations that are defined in the using access controls.

Defined fields

FAUTHCNTXT,,FIN Authorization Context
(permitted values)

·,,OVHDCOST ,,Overhead Cost Accounting

·,,SALES ,,,,Sales Accounting

·,,PRODNCOST ,,Production Cost Accounting

·,,INVTRY ,,,,Inventory Accounting

·,,GENLDGR ,,,,General Ledger Accounting

·,,ASSET ,,,,Asset Accounting

Extensibility

This authorization context also allows for custom authorizations for SAP delivered CDS Views. To define your own set of authorization objects to be checked you need to:

·,,Create a fixed value append for the domain “FIS_AUTHCNTXT” with your own custom authorization context

·,,Create a custom access control (e.g. a copy of I_GLAccountLineItem)

·,,Add the following line as first line into the body (e.g.): ( ) = aspect pfcg_auth ( F_AcDocA_C, FAuthCntxt = '' )

·,,Add further authorization checks line by line (e.g.): AND ( CompanyCode ) = aspect pfcg_auth ( F_BKPF_BUK, BUKRS , ACTVT = '03' )

·,,Define your roles accordingly and assign your newly created authorization context

Easy Authorization Management for SAP

CPI1466 during Backup   CL_GUI_FRONTEND_SERVICES - Frontend Services  
This documentation is copyright by SAP AG.

Length: 3475 Date: 20240523 Time: 063030     sap01-206 ( 62 ms )