SAP Note 1306604 - /SAPAPO/MC62 authorization for creating CVCs

Symptom
Authorization object C_APO_CVC (introduced by note 1235367) is used to limit rights for CVC maintenance.
A user has authorization to create CVCs for a POS A, but not for POS B.
On the first screen of /SAPAPO/MC62 the user enters POS A, then on the next screen, using the get variant button, selects a variant for POS B; authorization is not checked again, so the user is able to create CVCs for POS B.


Other terms
Maintenance of Characteristic Value Combinations, C_APO_CVC


Reason and Prerequisites
Program error. In case the POS is read from a variant, authorization object C_APO_CVC is not checked.
Notes 1235367 and 1262016 are prerequisites.


Solution
Please apply the attached correction or install the corresponding support package.

Affected Releases

Software Component Release From Release To Release And subsequent SCM 410 410 410   SCM 500 500 500   SCM 510 510 510   SCM 700 700 700

Correction delivered in Support Package

Support Packages Release Package Name SCM 410 SAPKY41020 SCM 500 SAPKY50017 SCM 510 SAPKY51010 SCM 700 SAPKY70003

Corrections Instructions

Correction Instruction Valid from Valid to Software Component Last Modifcation 804356 410 410 SCM 09.10.2009  09:49:48 804357 500 500 SCM 09.10.2009  09:50:59 1084410 700 700 SCM 16.02.2009  11:23:47 1084411 510 510 SCM 16.02.2009  11:34:45