‎2010 Sep 23 8:07 AM
Hi Experts,
We have authorization object S_TCODE for restriction of t-codes. Similarly, is there any authorization object for program.
One program is executed by the end user directly through SE38 t-code. People should not be authorized for that particular program. Is there any standard authorization object for program restriction?
Thanks and regards,
Venkat
‎2010 Sep 23 8:13 AM
Howdy,
The only authorization check is the following - but that will stop you from displaying the source code as well.
authority-check object 'S_DEVELOP'
id 'DEVCLASS' field p_s_develop-devclass
id 'OBJTYPE' field p_s_develop-objtype
id 'OBJNAME' field p_s_develop-objname
id 'P_GROUP' dummy
id 'ACTVT' field l_develop_actvt.
Here DEVCLASS = package name,
OBJTYPE = 'PROG'
OBJNAME = program name,
ACTVT = '03'
Cheers
Alex
EDIT: I assumed you didn't want to change your program to include your own auth check. If that's what you want then use S_DEVELOP with whichever parameters you want.
Edited by: Alex Cook on Sep 23, 2010 4:50 PM
‎2010 Sep 23 8:13 AM
Howdy,
The only authorization check is the following - but that will stop you from displaying the source code as well.
authority-check object 'S_DEVELOP'
id 'DEVCLASS' field p_s_develop-devclass
id 'OBJTYPE' field p_s_develop-objtype
id 'OBJNAME' field p_s_develop-objname
id 'P_GROUP' dummy
id 'ACTVT' field l_develop_actvt.
Here DEVCLASS = package name,
OBJTYPE = 'PROG'
OBJNAME = program name,
ACTVT = '03'
Cheers
Alex
EDIT: I assumed you didn't want to change your program to include your own auth check. If that's what you want then use S_DEVELOP with whichever parameters you want.
Edited by: Alex Cook on Sep 23, 2010 4:50 PM
‎2010 Sep 23 8:15 AM
Hello Venkat
You may use AUTH object S_DEVELOP:
OBJNAME = <name of program>
ACTVT = 16 (Execute)
Regards
Uwe
‎2010 Sep 23 8:19 AM