topic Re: Auth obj & Tcode in Application Development and Automation Discussions

Auth obj & Tcode

Former Member — Thu, 16 Aug 2007 15:34:38 GMT

Hi everybody,

I just regester, so I'm a roky

I have two questions for you guys, if someone can answer this it will be really appreciate it.

1: I'm using ECC 6.2, my question is how can I add Tcode manually through auth obj S_Tcode? we used to do this in pervious version but in this version they unable it, Can anyone navegate the steps?

2: another question is I was trying to create custom Auth obj throug SU24 when I excute mm03 transaction code and in change mode I enter Object tab and trying to define z_xxxx it doesn't save in MM03 trans a new auth obj ?

Thanks in Advance

Re: Auth obj & Tcode

Former Member — Thu, 16 Aug 2007 16:00:04 GMT

Hello,

Welcome to SDN.

Same as it like s_tcode. Try, it will work.

Note: Points always encourag me to reply !!

Re: Auth obj & Tcode

Former Member — Thu, 16 Aug 2007 16:29:14 GMT

Thanks for reply,

but if you go to Auth tab, and try to add Transaction code through S_Tcode for example you want to enter range of Transaction such Aaa_Ass.

I tried so many times its unable, Any suggestion

Thanks

Re: Auth obj & Tcode

Former Member — Thu, 16 Aug 2007 17:48:05 GMT

Add another instance of the object s_tcode manually and here define what all additional tcodes you want.

Re: Auth obj & Tcode

Former Member — Thu, 16 Aug 2007 19:10:40 GMT

Thank you so much !

Do you have any idea regarding creating Custom Auth obj through su24, I know I can create it through su21 but someone told me to I can create it through su24 when I execute specific transaction and want to add auth obj in that specific Trans

thanks in advance

Re: Auth obj & Tcode

Former Member — Thu, 16 Aug 2007 20:56:10 GMT

As far as I know, you used SU21 to create new Custom Auth Object, and SU24 to link the Custom Auth Object to a T-Code.

Thanks,

Lye

Re: Auth obj & Tcode

Former Member — Thu, 16 Aug 2007 22:57:13 GMT

do you want to create a new auth object or do you want to assign an auth object to a transaction?

Re: Auth obj & Tcode

Former Member — Fri, 17 Aug 2007 17:43:03 GMT

I understood

Thank you so much for your help,

I have another question regarding "Authorization Group" how to create auth group to secure certain table?

Thanks in advance

Re: Auth obj & Tcode

Former Member — Sat, 18 Aug 2007 00:25:51 GMT

transaction SE54.. Selection authorization groups-> create

Re: Auth obj & Tcode

Former Member — Tue, 02 Oct 2007 20:34:19 GMT

Lye, How do I transport a custom Auth object once I create it in SU21 ?

Re: Auth obj & Tcode

Former Member — Tue, 02 Oct 2007 22:21:48 GMT

hi,

1. Go to PFCG

2.click on change icon

3.click on authorization tab

4.click on change auth

5 click on manually,

6.fill the autho object ie S_TCODE enter

Re: Auth obj & Tcode

koehntopp — Fri, 12 Oct 2007 09:14:06 GMT

I would like to strongly advise AGAINST doing that. Inserting manual S_TCODE objects will - at best - make maintenance a lot harder in the future, at worst it will scrutinize your security efforts.

If you add the TCode manually, you will break the link to the authorization objects linked through your SU24 maintenance. So, you will either miss objects, or have too many or the wrong ones, as you need to add those manually as well.

When you review roles, you're likely to miss these ones as they do not appear in the menu. The user will also not see them in the menu, unless you create a manual menu. When you remove transactions from a role, the associated objects will not get removed automatically, as they would if you had inserted them via the menu.

In short: Don't, you'll thank me later

Frank.

Re: Auth obj & Tcode

Former Member — Mon, 15 Oct 2007 09:11:53 GMT

Hi,

I would like to add a suggestion. In the profile generator at the menu tab you see the button authorization default. If you use this the transaction will not be shown in the user menu, but has all the benefits from the profile generator. If that is your goal that the user must not be aware having this transaction, this is your solution. An other way I saw just an answer previous.

Have fun

Jan van Roest