topic Re: doubt in Application Development and Automation Discussions

doubt

Former Member — Tue, 08 May 2007 00:49:19 GMT

hi,

I want to restrict a group of Z tables,what will be the steps.

Re: doubt

dhorions — Tue, 08 May 2007 06:32:48 GMT

If you want to restrict editing of table data, you have to assign a "Authorisation group" (via the utilities menu in se11) to all the tables you want these users to have access to.

Then in the role that you are giving to the users, add the S_TABU_DIS object, with the assigned "authorisation group" in the field "DICBERCLS".

Users with this role will then be able to edit/read (depending on the value of the field ACTVT in the object S_TABU_DIS) all tables from this authorisation group.

Also, make sure these users don't have this object with DICBERCLS=* in any other roles.

More info can be found on <a href="http://help.sap.com/saphelp_erp2005vp/helpdata/en/c6/74ba3bd14a6a6ae10000000a114084/frameset.htm">help.sap.com</a>.

Re: doubt

manohar_kappala2 — Tue, 08 May 2007 06:59:21 GMT

Hi,

There a few options available depending on the type of solution you are looking for.

1) You can use the transaction SE54 to assign the Z tables to a authorization group and give access to the Authorization group through S_TABU_DIS.

and depending on the way you are trying to access the table might require SE16(not mandatory always).

The problem with this is once u have access to the S_TABU_DIS all the the tables which are not assigned to any auth grp are given access.

2) Second approach is to create custom Tcodes (Transaction with Parameters)

for SE16 (if you are creating this for SE16) and give S_TABU_DIS with the Authorization group.

The advantage is that the end user will not have access to Se16 so will not able to see other tables which dont have a authorization group

If you want to create the scenario for editing then do the same but with SM30 Tcode but the mae suew that it has a maintainance interface from SM30

Message was edited by:

Manohar Kappala

Re: doubt

Former Member — Tue, 08 May 2007 13:10:26 GMT

Hi sri,

There are 2 ways of doing this:

1st Way

1) Assign the Z table to Authorization Group using SE54

2) Add SM30 Transaction in your role

3) Add the Authorization Group just created in the DICBERCLS field of S_TABU_DIS

2nd Way---Creating a Custom Transaction Code

1) goto se93, give a unique name, say zxxx

2)Enter SE16 into the transaction field and select the flag the ‘skip initial screen’ field:

3)On the lower portion of the screen, enter the following information:

Name of screen field: DATABROWSE-TABLENAME

Value: Enter the name of the table you want to browse with

4)save it.

5) Now add the transaction zxxx in th role, and assign it to the user.

Hope it helps.

Please award points if it is useful.

Thanks & Regards,

Santosh

Message was edited by:

NAVABOTHU SANTOSH KUMAR