topic Re: Transaction code authorization in Application Development and Automation Discussions

Transaction code authorization

Former Member — Sun, 03 May 2009 09:33:35 GMT

Please let me know, other than roles . Any facility is available in SAP to block only one transaction code up to some days to particular one user.

Re: Transaction code authorization

Former Member — Sun, 03 May 2009 13:33:15 GMT

No,thats not possible

Rohit

Re: Transaction code authorization

Former Member — Mon, 04 May 2009 05:59:26 GMT

Hi,

That is possible only with the roles. You can specify the role validity for a particular user in SU01 at the Role tab. So make a new role with the required Tcodes

Hope this will help you.

Thanks

Lokendra Kumar

Re: Transaction code authorization

Former Member — Mon, 04 May 2009 07:50:19 GMT

Hi,

You can block the transaction in entire SAP system. But hey this is not recommended by SAP.

Particular transaction can be blocked via SM01. Go to SM01 and search for the TCODE you want to block and click on the check mark. You can also manually edit the program for particular transaction and block the tcode.

Note: This will block the transaction in entire sap system

Rakesh

Re: Transaction code authorization

Former Member — Mon, 04 May 2009 09:48:27 GMT

In a custom transaction you can do this, in the same way that you can do almost anything...

In SAP standard, I am only aware of some transactions which will lock themselves or restrict their functionality to only display while being used by another user. There are different ways of achieving this, the most common of which is to lock the table(s) via the enqueue / dequeue process.

Cheers,

Julius

Re: Transaction code authorization

Former Member — Mon, 04 May 2009 10:17:27 GMT

May i know if any user parameter setting to block this PA30 transaction code.

Re: Transaction code authorization

sdipanjan — Tue, 05 May 2009 20:48:39 GMT

Hi,

This is not possible. You can revoke the role containing that TCode (or put a validity date in past) and replace with other roles containing the rest TCodes of that role.

Regards,

Dipanjan

Re: Transaction code authorization

Former Member — Tue, 05 May 2009 21:03:42 GMT

You need to explain your requirement more specifically...

Being an HR transaction, there is a window for you to do this via structural authorizations which influence the additional object check at transaction start.

You can see these ( and influence them...) in transaction SE93. If you ST01 trace and use the "jump to source code" feature, then keep an eye out for function module AUTH_CHECK_TCODE (not AUTHORITY_CHECK_TCODE).

That might work, unless you are using variant transactions for "Enjoy" tcodes.

Cheers,

Julius

Re: Transaction code authorization

Former Member — Sat, 09 May 2009 15:39:28 GMT

I tried to find that function module.But they are not using that particular module inside the program.

Kindly let me know that, it is possible by using SHD0- variant transaction .

To make one user by using triggering T.code PA30 by showing different PA30 screen. Note : same T.code pa30 no variant transaction t.codes.

If It is possible mean, please help me to sort out the issue.

Satya

Re: Transaction code authorization

Former Member — Sat, 09 May 2009 19:06:29 GMT

> I tried to find that function module.But they are not using that particular module inside the program.

You dont need to use the function module. It will find your attempt to start the tcode and check it.

> Kindly let me know that, it is possible by using SHD0- variant transaction .

Probably not. Some tcodes (particularly newer ones) have limited use for variant transactions. Stated more correctly: Limited use for variant transactions without being forced to have access to use the original transaction afterwards when you attempt to navigate further.

Variant transactions are not secure.

> To make one user by using triggering T.code PA30 by showing different PA30 screen. Note : same T.code pa30 no variant transaction t.codes.

An option would be to use a transaction variant (not to be mistaken for a variant transaction ). But this would influence all usage of the original transaction for all users.

You would need to create a variant transaction for the transaction variant for those users who are not subject to the restriction, and be sure that the original tcode is not used in BDC recordings...

> If It is possible mean, please help me to sort out the issue.

Hope that helps you further.

Cheers,

Julius

Re: Transaction code authorization

Former Member — Sat, 16 May 2009 04:49:41 GMT

hii

This is possible through tcode sm01 but not recomended by sap to lock a tcode for a user because if

u lock it using this tcode the affect could be globally to all the clients so we locked tcodes using pfcg

rather than using smo1

byeeeeeeeeeee

takecare

Re: Transaction code authorization

Former Member — Tue, 19 May 2009 11:42:50 GMT

Thanks to all