topic Re: No Tcode Auth, but user is able to access the tcode in Application Development and Automation Discussions

No Tcode Auth, but user is able to access the tcode

Former Member — Fri, 29 Aug 2008 16:42:18 GMT

Hello All-

we recently upgraded from 4.6C to ECC 6.0.

we have an issue, where the user in not authorized to Tcode ME43 in any of the roles / profiles that are assigned to him.

Interestling he is able to work with that tcode in 4.6C & now in ECC 6.0

Checked table AGR_1251 table for each role the user has... no luck.

There are about 20 Ztcodes assined in one of the roles.

Is there a possibility that one of the Ztcode calling ME43 ?

If yes, how do i figure it out?

Is there a possibility that a SAP std.tcode internally calling ME43?

If yes, how do i figure it out?

What could be the other chances???

Note: profiles like SAP_ALL etc are given to the user. He has the profiles that are generated from the roles that are assigned.

No extra.

Thanks in advance.

Re: No Tcode Auth, but user is able to access the tcode

jurjen_heeck — Fri, 29 Aug 2008 16:52:48 GMT

> There are about 20 Ztcodes assined in one of the roles.

> Is there a possibility that one of the Ztcode calling ME43 ?

> If yes, how do i figure it out?

My first guess would be to talk to an abaper within the origanization. They should know that.

> Is there a possibility that a SAP std.tcode internally calling ME43?

> If yes, how do i figure it out?

Have a look at tr. SE97 and/or do a forum search on "called transaction"

> Note: profiles like SAP_ALL etc are given to the user.

I suppose you meant to write " are not "

Jurjen

Re: No Tcode Auth, but user is able to access the tcode

Former Member — Fri, 29 Aug 2008 17:23:21 GMT

Hello Jurjen,

Thank you.

You are true, there are no extra profiles like SAP_ALL given to the usre.

need to check..on SE97

Re: No Tcode Auth, but user is able to access the tcode

Former Member — Fri, 29 Aug 2008 18:11:38 GMT

Hi,

Run an ST01 trace on the user for the tcode ME43 and you will get to know the objects that are being used in the role.

May be you can restrict them(without effecting other tcode usage)

Rakesh

Re: No Tcode Auth, but user is able to access the tcode

Former Member — Fri, 29 Aug 2008 18:20:35 GMT


Interestling he is able to work with that tcode in 4.6C & now in ECC 6.0

Is the user able to run the transaction ME43 directly ?

If yes, i would check the roles for S_TCODE object in SUIM.


Is there a possibility that one of the Ztcode calling ME43 ?
If yes, how do i figure it out?
Is there a possibility that a SAP std.tcode internally calling ME43?
If yes, how do i figure it out?

Yes, you can find what all tcodes call ME43.

1. Go to SE93, enter transaction code ME43

2. Click "Where-used", deselect all except "Transaction"

3. Execute it, this will give you list of all transactions calling ME43.

I would recommend copying them in an excel sheet and doing a vlookup to see out of the "about 20 ztcodes" which are calling ME43

Regards,

Zaheer

Re: No Tcode Auth, but user is able to access the tcode

Former Member — Fri, 29 Aug 2008 19:41:10 GMT

First of all, how and where are you finding this "but user is able to access the tcode"?

- ST01 trace?

- SU53?

- SM20?

- Developer trace?

- The user themself?

There are some differences.... you need to provide that information first.

Cheers,

Julius

Re: No Tcode Auth, but user is able to access the tcode

Former Member — Mon, 01 Sep 2008 11:56:43 GMT

Hello,

Please check with the roles that was assigned to the user for the transaction ME43.

Try to check at the authorization level at S_TOCDE, rather than checking at Menu level in the roles.

Regards,

VeerendraKumar.

Re: No Tcode Auth, but user is able to access the tcode

Former Member — Mon, 01 Sep 2008 12:49:35 GMT

> Try to check at the authorization level at S_TOCDE, rather than checking at Menu level in the roles.

Yes, that is a good point - but we need to wait for to get back to us with more infos.

The quality of the answer is usually directly proportionate to the quality of the question...

Re: No Tcode Auth, but user is able to access the tcode

Former Member — Wed, 03 Sep 2008 09:19:03 GMT

Hi,

I suggest you start transaction su56 for that user and do a search on s_tcode and analyse this if there are no * or ranges that gives the possibility to start the meant transaction.

Have fun

Bye Jan van Roest