topic Re: Tcode authorization without any role or profile in Application Development and Automation Discussions

Tcode authorization without any role or profile

Former Member — Sat, 31 May 2014 05:53:40 GMT

Hi Experts ,

Can you please suggest on authorization issue , if observed that one Tcode not given in to any roles or profile but some user still using this authorization.

When I checked role and profile for such user using the SUIM still it shows no data.

So is there any other way to assign direct Tcode without using any role or profile.

Thanks in advance .

Re: Tcode authorization without any role or profile

Colleen — Sat, 31 May 2014 06:00:50 GMT

Hi Gajanan

Does it show up in the user buffer? Did you notice it in a trace with RC=0 on a call transaction?

What have you checked so far?

Regards

Colleen

Re: Tcode authorization without any role or profile

Former Member — Sat, 31 May 2014 07:06:45 GMT

Hi Gajanan,

Please check if you have assigned reference user to some users?

Also answers Colleen's questions to give us more clarity.

BR,

Mangesh

Re: Tcode authorization without any role or profile

Colleen — Sat, 31 May 2014 07:12:08 GMT

SU56 would pick up or identify if

reference user
profile mismatch (PFUD)
corrupt profile (regenerate profile)
misread of user access (manual S_TCODE from a role instead of role menu)

Re: Tcode authorization without any role or profile

jurjen_heeck — Sun, 01 Jun 2014 09:30:45 GMT

In addidtion, this may be a called transaction. Investigate SE97 and it's documentation to see what that does.

Re: Tcode authorization without any role or profile

Colleen — Sun, 01 Jun 2014 10:30:51 GMT

I asked about the ST01 RC=0 earlier for that exact reason

Re: Tcode authorization without any role or profile

Former Member — Sun, 01 Jun 2014 23:27:08 GMT

not sure how you are using SUIM to check, just to be sure, use the complex selection method or the authorization values method. the by transaction method only check for transactions that were added via the menu.

look for object= S_TCODE, value=(the transaction code)

SUIM will then calculate if the transaction code was added manually and as part of a wild card or a range.

i.e. if the transaction was MM02 it will be accessible if the S_TCODE had

wild card value M*, MM*, MM0* or

range value A*-Z*

Otherwise, it is possible that it was called indirectly and the BADI does not perform a S_TCODE check.

Re: Tcode authorization without any role or profile

Former Member — Mon, 02 Jun 2014 16:25:11 GMT

Hi All,

Thanks for quick reply .

Colleen-

I have check the buffer in SU56 but i didn't found this Tcode and in the trace it give RC=0.

Please check the below screen and suggest any solution.

Thanks