Need advice on reporting on program execution.

[kevin01]

As a result of a recent audit , we need to restrict access to certain programs. RSDD_EXEC_SQL, RSDU_EXEC_SQL. We cannot remove SE38/SE80 etc. as it is needed by these users, so we need a way to report on people executing the above programs.
If this is not the forum for this, please direct us to the correct area.
Thanks in advance
Kevin

[Colleen]

Hi Kevin

It's a couple of weeks late but some thought.s..

SE38/SE80 will check S_DEVELOP acess. If acess is to SE38 you could give SA38 which will check S_PROGRAM instead and then allow the ACTT 03 to look at code and and objects. From here you can then look into S_PROGRAM and S_PROGNAM authorisations.

For review of activities, have you look at Security Audit Log for SM19/SM20n to see what execution information you can get there?

Finally, have you checked if the programs that you need to restrict have an additional authorisatoin check that you can remove from the users?

Regards

Colleen