topic Re: Transaction Variant Assignment in Application Development and Automation Discussions

Transaction Variant Assignment

Former Member — Fri, 23 Sep 2011 08:35:00 GMT

Hi All,

We have created a traansaction variant to hide a icon in SQ01 tcode using SHD0 and assigned it to two users.

It works for one user and the other still able to access the icon.

Could anyone please guide me to come out of this issue.

Thanks in Advance,

Thiyagu.

Re: Transaction Variant Assignment

Former Member — Fri, 23 Sep 2011 09:18:33 GMT

Hi,

How have you assigned it to the users?

Re: Transaction Variant Assignment

Former Member — Sat, 24 Sep 2011 18:55:44 GMT

Hi,

See what other roles/profiles user has? If you have assigned the variant transaction to the users, it can't behave separately for the users.

Regards,

Raghu

Re: Transaction Variant Assignment

Former Member — Sat, 24 Sep 2011 19:16:46 GMT

There is a difference between a variant transaction and a transaction variant.

This here is a transaction variant --> the core transaction is executed with a different screen variant.

It can be assigned globally to the core transaction or user specifically in table SHDSTUSR. It supports different screen variants for users who have the same roles / authorizations and are starting the same transaction.

In the case of variant transactions, the users start different transactions which call the core transaction using the different screen variants passed from the calling transactions.

Personally I try to use this very restrictively and only if authorizations are not possible to distinguish between activities and I also check that there are no ok-codes for the invisible function keys and main menu task bars.

9 times out of 10 it is not really secure and created confusion, but looks nice to the user and confuses admins and audit false-positives... particularly variant transactions if the auditor also assumes that a transaction code is needed to be able to actually do something.

So... some companies create myriads of variant transactions to duck under SoD rule sets. The auditor needs to also check the "where-used-lists" of the core transactions....

However.... as an admin wanting to maintain this thing you and those who maintain it after you will have to be able to find them (user check tables and transaction where-used-lists) as well when trouble shooting... ;-((((((((((

Cheers,

Julius

Re: Transaction Variant Assignment

Former Member — Sun, 25 Sep 2011 18:03:50 GMT

Hi Julius,

I should read between the lines Thanks for the detailed information.

Regards,

Raghu

Re: Transaction Variant Assignment

Former Member — Thu, 29 Sep 2011 11:49:28 GMT

Hi Julius,

Thanks for your detailed explanation.

As you said, my issue is related to screen variant.

I once again thank you for your valuable reply.

Regards,

Thiyagu