FIXED - SHD0 or restrict user access to certain fields in SO

[ggsap]

Hi All
I have a scenario in which i need to restrict 2 users in the sales order screens VA01 and VA02.
The first user "should" be able to change the payment terms (VBKD-ZTERM) field in the VA01 and VA02 screen and the second user "should not" be able to change the payment terms (VBKD-ZTERM) field in the VA01 and VA02 screen . Both users are for order type OR
I have done the following so far.
1. I tried to creating 2 variants (ZV1 and ZV2)in SHD0 for sales order and assigned it to 2 "Z" Transactions created in SE93. But that has no effect. I am not sure why that is the case.
2. In V0V8 there is a variant attachment possible but it can take only one variant. Also it does not help as it is not user specific.
is there a specific way to do it or am i doing something wrong ?
Thanks in advance for any help
ggsap

[ggsap]

Hi there,
Any ideas or clues for me ?
Thanks
ggsap

[Baz]

you cannot have two transaction variants assigned to the same sales order type. it only allows one.

have you tried seeing if you can control it via authorisations?

i am shadowing this in the security forum as those bright sparks may shed some light on whether this is possible by Role/Authorisations.

[thx4allthefish]

This cries loudly for an abapper.

No way we sec-admins can do anything for you on field-level.

Try enhancements, someplace in MV45AFZZ.

Now I am shadowing this in ABAP/Security.

[Gothmog]

I'd agree checking an authorisation object (specific if no standad is appropriate) in a user-exit.
EXIT_SAPMV45A_004 (extension V45A0003) should do the trick.

[ggsap]

Hi everybody
Thanks for the update. I will check with my basis and ABAP team and see what can be done to resolve this.
Thanks
ggsap

[ggsap]

Hi All
After a lot of deliberations we have deicded that it is not possible to limit the access to change the ZTERM (payment trem) for certain users through functional configuration.
We will reconvene at a later stage to discuss what can be done through ABAP coding changes.
thanks for your inputs on this.
Regrads
ggsap