SPRO Authorization

[Former Member]

Dear Techies,

i want to block spro transaction on my ABC role. How can i achieve this.

i have disabled S_tabu_dis and s_tabu_cli. But i want to disable the transaction spro in total.

Help please.

Thanks in advance.

[Former Member]

Hi

Lock transaction code SPRO via T Code SM01.

<removed_by_moderator>

Thanks

Pankaj Kumar

Edited by: Julius Bussche on Apr 1, 2008 4:16 PM

[Former Member]

well, if i do lock the transaction spro on sm01, will it available to other "users" and "clients" exisiting on the server ??

[Former Member]

Hi,

Just deactivating the objects S_TABU_DIS, S_TABU_CLI will not do.

Remove SPRO from S_TCODE. Or you may lock the transaction through SM01.

Hope it helps.

<removed_by_moderator>

Thanks & Regards,

Santosh

Edited by: Julius Bussche on Apr 1, 2008 4:17 PM

[Former Member]

Hi,

Just Inactivating the objects S_TABU_DIS, S_TABU_CLI will not do.

Remove SPRO from S_TCODE. Or you may lock the transaction through SM01.

Hope it helps.

<removed_by_moderator>

Thanks & Regards,

Santosh

Edited by: Julius Bussche on Apr 1, 2008 4:17 PM

[Former Member]

Hi

If you lock t code SPRO in SM01.it will apply all client and all users.

<b>Rewards point if helpful</b>

Thanks

Pankaj Kumar

[Former Member]

well thats exactly what i Don't want.

i want the spro transaction to be disabled for only specific users so I can't use sm01.

[Former Member]

Dear Santosh,

i found s_tcode but im unable to delete spro from it. can u guide me through the steps please..

[Former Member]

Hi,

If you delete the Transaction SPRO from menu part of the role, it will be deleted in S_TCODE as well.

But your point "i want the spro transaction to be disabled for only specific users ", It is not possile to perform different actions with the same role. You will have to build two roles, One with SPRO and other without SPRO and assign it to users accordingly.

Hope it helps.

<removed_by_moderator>

Thanks & Regards,

Santosh

Edited by: Julius Bussche on Apr 1, 2008 4:18 PM

[manohar_kappala2]

Hi,

By Disabling the transaction SPRO in total if you meant across the entire client then use SM01. But if you meant to disable the access in a particular role ABC then remove the SPRO value in S_TCODE.

But this would notrestrict the access to some of the transactions in SPRO as they have different transactions for them

For eg in your role ABC if the S_TCODE has a value of O*.

then if the transaction you want to finally reach through SPRO is a tcode starting with O then the access to that would be granted.

But Since you said that you disabled S_TABU_DIS and S_TABU_CLI in the role.

It should be good to a certain extent until unless the transaction the person is trying to reach is an interface which is controlled through the above mentioned objects.

Hope this helps

MAnohar

[Former Member]

hey guys..the issue is resolved..

in s_tcode, we have to define the "from and to" excluding spro! thats it..thank You all..

[Former Member]

Could you please guide me the steps to disable the transaction spro in total.

When assigning missing authorization some how the endusers got access to spro i want to block that in total.

Disabling both s_tabu_dis & s_tabu_cli will do ?

[Former Member]

Hi,

these two objects will not do. Complete list of objects are listed below.

S_DOKU_AUT

S_PROJECT

S_PROJECTS

S_TRANSPRT

S_TABU_CLI

S_TABU_DIS

S_RFC

S_IMG_ACTV

S_PROJ_GEN

S_PRO_AUTH

In addition to this please remove the tcode spro.

<removed_by_moderator>

Thanks,

Gowrinadh Challagundla

Edited by: Julius Bussche on Apr 1, 2008 4:19 PM

[Former Member]

Thanks Manohar for the detailed description!