-
Products and Technology
By Category
-
Groups
Activity Groups
Industry Groups
Influence and Feedback Groups
Interest Groups
Location Groups
Customer Only Groups
- Developers
- Partners
- Events
- Help Center
- Topic Pages
-
Explore SAP
Products
Learning and Support
-
- Products and Technology
- Groups
- Developers
- Partners
- Events
- Help Center
- Topic Pages
-
Explore SAP
- Explore SAP
-
Products
- Products
- SAP Business Suite
- Artificial Intelligence
- Business applications
- Data and analytics
- Technology Platform
- Financial Management
- Spend Management
- Supply Chain Management
- Human Capital Management
- Customer Experience
- SAP Business Network
- View products A-Z
- View industries
- Try SAP
- Partners
- Services
- Learning and Support
- About
- SAP Community
- Groups
- Interest Groups
- Application Development and Automation
- Discussions
- Restrict access to only one program
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Restrict access to only one program
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎2007 Dec 13 10:18 AM
- SAP Managed Tags
- Security
Hi all,
I need to generate a role which restrict users access only to execute one Z program in SA38.
Can someone let me know if there's a specific authorization object ?
Many thanks,
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎2007 Dec 13 11:06 AM
- SAP Managed Tags
- Security
Creata a custom TRX for teh program and assign that to a role.
This is not the only, but the most secure solution, as one should not allow access to SA/SE38 in prodcution
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎2007 Dec 13 11:06 AM
- SAP Managed Tags
- Security
Creata a custom TRX for teh program and assign that to a role.
This is not the only, but the most secure solution, as one should not allow access to SA/SE38 in prodcution
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎2007 Dec 13 12:42 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎2007 Dec 13 1:44 PM
- SAP Managed Tags
- Security
In PFCG you can assign a program to the role menu & SAP will generate a tcode for it.
Some may suggest putting an auth group on the program and controlling by giving access to only that auth group in object S_PROGRAM. Unfortunately your user will still be able to execute 10's of thousands of other executable programs which are not assigned to auth groups. Even though there are security checks in most of the dangerous ones, it's not worth it in my opinion.
All said & done I would take Auke's approach as that is accepted "best practice" in this area.
Bluesky