topic Re: SPRO restriction in Application Development and Automation Discussions

SPRO restriction

Former Member — Wed, 10 Sep 2008 10:51:44 GMT

Hi all,

I am having an issue of transaction not found with the search within the role..

If i run SUIM and go to "User --> Users by comple selection criteria -->by Transaction authorization

search, T-code SPRO , which should not be allowed to any user , Its showing for 10 users.

Is there a way i can restrict this T-code for everyone or just give Display rights.

any help will be much appreciated.

Thanks

Adnan

Re: SPRO restriction

JPReyes — Wed, 10 Sep 2008 10:59:06 GMT

Is there a way i can restrict this T-code for everyone or just give Display rights.

Sure... SUIM -> roles -> by transaction assigment -> Check the roles that has access to SPRO and remove or change the values to 03 Display.

Regards

Juan

Re: SPRO restriction

former_member74904 — Wed, 10 Sep 2008 11:03:20 GMT

first of all, using SUIM the way you described is not the most thorough. this will only check transaction-codes assigned through the menu and not directly in an S_TCODE object.

secondly, using the search with keywords such as SPRO, display, IMG etc. will get you all the answers you need regarding making a display only role for customizing.

Re: SPRO restriction

Former Member — Wed, 10 Sep 2008 11:31:58 GMT

Hi ,

Thanks for the reply,

I have tried it and it doesnt work this way.

Will update you soon,,

Thanks

Re: SPRO restriction

Former Member — Thu, 11 Sep 2008 16:54:19 GMT

Creating SPRO Display only.

You might be asked to give SPRO display while implementing your SAP. I generally give these authorizations to make it display only. Please test it.

Object Field Value

S_PROJECT PROJECT_ID *

S_PROJECT PROJ_CONF *

S_RFC ACTVT 03

S_RFC RFC_NAME *

S_RFC RFC_TYPE *

S_TABU_CLI CLIIDMAINT '

S_TABU_DIS ACTVT 03

S_TABU_DIS DICBERCLS *

S_TRANSPRT TTYPE Deactivate or remove PIEC and TASK

S_CODE REMOVE SPRO

Re: SPRO restriction

Former Member — Thu, 11 Sep 2008 16:58:02 GMT


> S_RFC	ACTVT	03
> S_RFC	RFC_NAME	*
> S_RFC	RFC_TYPE	*
>

Now I wonder where you copy&pasted that from.......

Could you please explain to us how activity 03 is used in object S_RFC?

Cheers,

Julius

Re: SPRO restriction

Former Member — Thu, 11 Sep 2008 17:05:46 GMT

By the way you do not need S_RZFC object.

You'll need following objects with activity "03".

S_PROJECT

S_TABU_CLI

S_TABU_DIS

S_TRANSPRT

Re: SPRO restriction

Former Member — Thu, 11 Sep 2008 17:11:19 GMT

But S_TABU_CLI does not have a field "Activity"...?

Cheers,

Julius