topic Re: Protect Program in Application Development and Automation Discussions

Protect Program

Former Member — Wed, 30 Jan 2008 22:01:44 GMT

I have to secure execution of RSEC_MIGRATION so that no one in DEV/QAS/PRD can execute it. How can I do that. Please give me step by step full points will be awarded.

Re: Protect Program

Former Member — Thu, 31 Jan 2008 03:07:45 GMT

Hi Rohan,

First try to restrict the users from executing SE38 tcode. Second restrict the program execution with those having SE38 access using S_DEVELOP object.

-Pinkle

Re: Protect Program

Former Member — Thu, 31 Jan 2008 10:24:55 GMT

For SE38, there can be two types of control - program display (code) access via S_DEVELOP and execution access via S_PROGRAM.

S_PROGRAM control works on a principle similar to S_TABU_DIS.

The field P_GROUP contains auth group values for programs which are maintained in the table TPGP.

The association between the program and the program group can be maintained using the program RSCSAUTH. (this maintains the table SREPOATH).

So to restrict a program assign it to a new authorization group and allow "execute" access for this group to only the selected users via S_PROGRAM.

Regards,

Sanju