topic Re: Disable create new session in Application Development and Automation Discussions

Disable create new session

Former Member — Tue, 01 Sep 2009 11:02:53 GMT

Hello ,

How do i disable create new session from menu

System-create new session .

Re: Disable create new session

jurjen_heeck — Tue, 01 Sep 2009 11:07:28 GMT

As far as I know there's no security option to limit the number of sessions per user. There is a system parameter but I wouldn't recommend setting that very low as it will bite you (and your fellow administartors).

Why do you want to restrict this?

Re: Disable create new session

Bernhard_SAP — Tue, 01 Sep 2009 11:58:59 GMT

Hi,

it is rdisp/max_alt_modes. See also SAP note #12466. Please remember, that there are also 'invisible' sessions used, for instance for printing.....

b.rgds,

Bernhard

Re: Disable create new session

Former Member — Tue, 01 Sep 2009 14:29:46 GMT

This message was moderated.

Re: Disable create new session

sdipanjan — Tue, 01 Sep 2009 21:49:32 GMT

Basically you won't be able to disable this as the minimum allowable limit of external session is 2. This is kept for emergency purposes like invisible sessions (print, rfc etc.) as mentioned by Bernhard. However, this is really a good option comes with SAP to check other details of the same systems and thus delimit the usage of Multi-GUI logon which is again SAP License issue.

Just wanted to know for what you are looking for this idea? requirement?

Regards,

Dipanjan

Re: Disable create new session

Former Member — Wed, 02 Sep 2009 04:48:26 GMT

This message was moderated.

Re: Disable create new session

Former Member — Wed, 02 Sep 2009 07:27:59 GMT

I'm with the rest of the guys on this one.

What risk do you want to mitigate by reducing the sessions?

Re: Disable create new session

Former Member — Sat, 05 Sep 2009 21:57:05 GMT

If your concern is debugger related, then you can use several options (also in combination) to contain this risk.

The new debugger anyway starts a new external session in the context of the user doing the debugging. Perhaps what you are looking for is to disable function codes within the system debugging engine only, and not new sessions for all users?

Where I have also seen this is with SAP Logon Tickets (Portal iViews to Backend SAPGui sessions). You cannot log all sessions off again...

Is this a programming problem related to transaction ID's?

Please provide more details of what your concern is (and what you have done to invoke this problem...).

Most likely you will not answer, is my guess...

Cheers,

Julius

Re: Disable create new session

Former Member — Mon, 07 Sep 2009 13:22:39 GMT

Hello ,

We are using portal . Users login user portal so we want to to disable the creates session icon from screen.

we don't to disable it if users login usign gui .

very few users use gui rest uses portal.

we use portal for LMS and TMS .

Re: Disable create new session

sdipanjan — Mon, 07 Sep 2009 15:14:41 GMT

What is the Insecurity you are feeling to be pertaining if this option is kept intact? Since very few users are using sapgui, so there is no point of thinking for load on system. Can you please let us know why you are looking for this criteria?

Regards,

Dipanjan

Re: Disable create new session

Former Member — Mon, 07 Sep 2009 18:12:17 GMT

So the user is logging on again and again from a portal iview which is calling the session_manager and opening a GUI session.

=> You have a portal "SSO intermediary" issuing SAP Logon Tickets?

I am not aware of a solution to this problem which you have created..

I have also not looked into this since about a year, so there may be some way or better alternates anyway which you might want to look into.

Cheers,

Julius

Re: Disable create new session

Wolfgang_Janzen — Wed, 09 Sep 2009 16:05:28 GMT


> We are using portal . Users login user portal so we want to to disable the creates session icon from screen.
> We don't to disable it if users login using gui.

To my knowledge it's possible to instruct the Portal just to launch one single ABAP transaction (via SAPGUI).

In that case, the "create new session" is disabled and the SAPGUI session will automatically terminate at the end of the invoked transaction. This is the so-called "single transaction mode".