topic Re: authorization removal in Application Development and Automation Discussions

authorization removal

former_member285951 — Mon, 27 Jul 2009 12:32:33 GMT

dear gurus,

i want to remove a T-CODE VF11 from one of my user in PRD. i deleted it from my role and i did save and regenerated the profile. but the user is still able to access the T-CODE VF11. plz help me how can i remove it completely.

Regards

praveen

Re: authorization removal

jurjen_heeck — Mon, 27 Jul 2009 12:35:58 GMT

You'll just have to keep searching in the other roles/profiles the user has and take it out of all of these. No easier way to do this...

Re: authorization removal

Former Member — Mon, 27 Jul 2009 13:03:01 GMT

This message was moderated.

Re: authorization removal

former_member285951 — Mon, 27 Jul 2009 13:51:09 GMT

Dear Gowrinadh,

i have gone thru suim and checked all the roles and profiles,but it didnt list the transcation code vf11. so plz sujest me what should i do next.

regards

praveen

Re: authorization removal

Former Member — Mon, 27 Jul 2009 13:58:45 GMT

Hello,

Have you checked for authorizaiton object S_TCODE for value VF11 in suim. There should be some role /profile which is providing access to user.

Regards,

Gowrinadh

Re: authorization removal

Former Member — Mon, 27 Jul 2009 14:00:23 GMT

Hi Vinodh

After you make any changes in role/profile, make User comparison so the changes will affect to that user.

Regards

Ravi

Re: authorization removal

Former Member — Mon, 27 Jul 2009 14:13:07 GMT

Hi,

1.If VF11 is only present in the role from which you removed then check that other than menu whether this transaction is added directly in s_tcode auth object in the role. It may be the case that you removed it from the menu but VF11 is also manually added in s_tcode auth object. Check and ensure that.

2. Check the txn from suim in 2 ways.

a. Roles by transaction (Which shows txn in the menu)

b. Role by auth values. In auth object give s_tcode and VF11 in the field. It will show all roles where VF11 exists in the s_tcode directly.

Check and let us know if any issue.

Regards

Aveek.(

Re: authorization removal

Former Member — Mon, 27 Jul 2009 14:37:52 GMT

This message was moderated.

Re: authorization removal

jurjen_heeck — Mon, 27 Jul 2009 15:29:27 GMT

This message was moderated.

Re: authorization removal

Former Member — Wed, 29 Jul 2009 07:00:08 GMT

Hi,

First chkout in Suim by user complex selection(at object level chking) -->by authorization values.-> give s_tcode and field has Va11.

this mite help u....

other wise goto su24--->give va11

it will get u list of auth objects.

goto pfcg->authorization tab -

>search authobjects and make there acitivities as Display..

Thanks.

Krishna.

Re: authorization removal

Former Member — Wed, 29 Jul 2009 07:03:03 GMT

Please use proper English otherwise your posts will be rejected in future.

Thanks,

Julius

Re: authorization removal

Former Member — Wed, 29 Jul 2009 10:14:41 GMT

Hi,

You can also follow the below steps to find the roles in which the transaction is present in S_TCODE.

1)SUIM

2)Role by complex selection criteria

3)In the user name field provide the userid,in authorization object field(object1) put S_TCODE and under this put the transaction code.

4)Execute

You will get the required rsult

Re: authorization removal

Former Member — Wed, 29 Jul 2009 10:51:39 GMT

That's enough now...

Thread locked.