topic MM17 Security Question in Application Development and Automation Discussions

MM17 Security Question

Former Member — Tue, 16 Oct 2012 16:57:09 GMT

Using T-Code MM17, is there a way to limit access to mass update MARC Table fields only? Or to take to a specific field only, example MARC-LGFSB?

Re: MM17 Security Question

Former Member — Tue, 16 Oct 2012 21:45:35 GMT

what release are you on?

Re: MM17 Security Question

Former Member — Tue, 16 Oct 2012 21:57:13 GMT

ECC 6.0 Enhancement Pack 5

Re: MM17 Security Question

Former Member — Tue, 16 Oct 2012 22:14:39 GMT

Hi Terry,

Yes it is possible but for that you have to make some changes through SU24 for that T-code MM17.

MM17 does not proposes the auth object check for S_TABU_DIS. You have to make this check YES .

Also assign some auth group to the table you want to restrict like MARC and then once you will add the T-code MM17 in any of the role, it will populate the auth. object S_TABU_DIS and you have to put the auth group which you assigned for the table. For activity you can update change or display whatever you want.

Please try this solution and elt me kwno if any problem.

Thanks,

VarunJain

Re: MM17 Security Question

Former Member — Tue, 16 Oct 2012 22:33:47 GMT

I thought about adding AO S_TABU_NAM to MM17 using SU24, but I was not sure if that would do the trick. I have little experience on Auth groups, I did create one a while ago, just have to remember how to do that.

Thanks,

Terry

Re: MM17 Security Question

Former Member — Tue, 16 Oct 2012 23:01:27 GMT

Hi terry,

Pls find the link below and it will help you to setup the auth group step by step.

http://scn.sap.com/docs/DOC-17023.

After doing this assign that auth group to the tabel and add in SU24 to fix the restriction for MM 17.

Please let me kwno if ay other help required. Hope this will help you.

Thanks,

Varun Jain

Re: MM17 Security Question

Former Member — Tue, 16 Oct 2012 23:17:59 GMT

That document is for Authorization objects not for authorization groups.

Re: MM17 Security Question

Former Member — Wed, 17 Oct 2012 18:10:57 GMT

Hi Terry,

Sorry, I forgot this document was for auth. opbject not for auth group.

Please go in the T-code SE54, give the table name and choose the auth. group and then click on create/chane.

You can create the auth, group like this.

Hope this will help you.

Thanks,

Varun Jain

Re: MM17 Security Question

Former Member — Wed, 17 Oct 2012 18:26:45 GMT

Thank You so much for your help.

Re: MM17 Security Question

Narvada — Fri, 14 Mar 2025 13:02:35 GMT

Hello,
Can you please confirmed that by the solution that worked in this situation was:
i) Enabling S_TABU_DIS to YES in SU24 for MM17 tcode.
ii) Creating an authorization group in SE54 and assigning it table MARC to it and mainting this authorization group in S_TABU_DIS in the role.

Was it by doing these 2 steps, you were able to restrict modification be made only in table MARC and fields from MARC in MM17 tcode ?

Thanks and Kind Regards,
Narvada