Knowledge Management

Question:
Hi SAP Masters,
please help me... i am doing authorisations for the first time...
i have created a profile and attached it to an user id.
when i was testing the profile, in Expert mode (PO10) i found that after the user creates an org unit, it takes the user dynamically to create a relationship infotype - A002 - this org unit reports to -
but the provision for cancelling this relationship infotype is not working. the system says, "Write to DB not yet" - Mandatory relationship".
please help me out and tell me where i am making the mistakes...
thanks & regards
Venkat
Answer:
Venkat,
Use transaction SU53 as a diagnostic tool, and check individual authorisation objects, there may be mismatch between IT 1001 and allowed operations/attributes thereof.
Sunil
Answer:
I recommend you to make an authorizations trace before you build the profile. The steps you have to follow are:
1- Use transaction ST01 and switch on the trace for authorizations establishing a filter with a user an in transaction or program you are interested in. You may use a user with full authorization.
2- Execute the transaction with that user (the one that you specified in the filter) , all the actions that the final user has to do.
3- Swith of the trace and take a look to the log generated by the system, by ST01. There you can find all the authority objects that have been checked.
4- Then, build the profile and test it, using SU53 to enhance further problems.
Of course I will recommend you to build the profile by profile generator (PFCG)