In the standard analyses of the Logistics Information System, it is possible to carry out authorization checks on the characteristic values level.
You can thereby prevent colleagues of an organizational unit (for example, purchasing organization, plant, sales organization) from getting a display of key figures from external organizational units.
Since the information structures and thus the claims on the authorization check differ greatly, you can also call up a form routine developed by you, in which you can carry out authorization checks according to your needs, in addition to the standard SAP authorization checks.
If you do not want to use the standard SAP authorization checks because you want to use your own authorization objects, for example, you can override the standard authorization checks.
SAP offers authorization checks for the following domains:
The fields that the authorization objects use are information structure and characteristic.
Set authorizations and profiles to these authorization objects.
The SAP enhancement belonging to it is MCR00001.
This functions exit replaces the program ZMCREPAU as of 3.0C, with which you could create your own authorization checks.
But it is still possible to integrate the authorization checks, which you created with program ZMCREPAU, into the functions exit MCR00001.