topic Re: Controlling Access at a transaction code level! in Application Development and Automation Discussions

Controlling Access at a transaction code level!

Former Member — Tue, 05 Apr 2011 23:53:38 GMT

Is it possible to control access at the transaction code level? Ex: Controlling access to VK11. The system already has several roles with access privileges to VK11. As a new requirement if I have to control access to a very limited set of users/roles then what is the best approach? Do I have to clean up all the existing roles or this can be handled in a simpler way?

Re: Controlling Access at a transaction code level!

mvoros — Wed, 06 Apr 2011 00:09:28 GMT

Hi,

authorization object S_TCODE allows you to control access to transaction. So if there is any role which should not have access to same aprticular transaction then you have to update that role. In other words if there is a mess then you need to clean it up.

Cheers

Re: Controlling Access at a transaction code level!

Former Member — Wed, 06 Apr 2011 20:04:01 GMT

Thank you Martin!

Re: Controlling Access at a transaction code level!

Former Member — Tue, 19 Apr 2011 07:18:13 GMT

Hi Lakshmi,

Regarding your question, you need to check which roles has assined as V* under S_TCODE , you need to remove VK11 from that and you need to give the range accordingly.

Hope this information helps.

thanks!

Regards,

Pavithra.B

Re: Controlling Access at a transaction code level!

Bernhard_SAP — Tue, 19 Apr 2011 07:29:30 GMT

...just a thought: copy VK11 to (for instance) ZVK11 in se93. Lock vk11 in sm01. Create a role only with s_tcode=zvk11. Assign that role to that limited number of users. b.rgds, Bernhard