2011 Feb 19 6:31 AM
Hi All,
My requirement is that I want to make all the Z objects uneditable. Suppose there is a data-element 'ZNAME', and when user tries to change it in se11 tcode, he should not be allowed. And the Zobject can be any thing such as FRICE or Dictionary objects.
Solution should not be in form of Authorization objects for Tcodes. Because I want to restrict only certain Z objects and not all Zobjects.
2011 Feb 19 12:43 PM
A clean solution would be to use authorization object S_DEVELOP, organize the objects in packages and assign appropriate roles to the developers.
Thomas
2011 Feb 19 4:27 PM
Hi Thomas,
Thanks ..but can u clarify further??
You mean that I should assign all the Zobjects to a single Z namespace package and assign that package name to authorization object S_DEVELOP...?
WIll the objects under that Zpackage be completely under our control??
And are u sure that with that Authorization object Can i restrict all users to only view [No change access] all my Zobjects.??
Edited by: log2srini on Feb 19, 2011 5:32 PM
2011 Feb 21 9:58 AM
Please read the online documentation of authorization object S_DEVELOP, it is very detailed. It takes some effort to arrange the objects in packages and build corresponding roles (you need help of a security specialist), but all you described and more can be achieved by properly setting this up.
Thomas
2011 Feb 19 1:39 PM
Try the editor lock in the attributes
--
Raul Natu
Edited by: Raul Natu on Feb 19, 2011 2:39 PM
2011 Feb 20 5:28 PM
Hi Raul,
I have seen editor lock for Reports. But is there such editor lock for all Dictionary objects and FRICE objects present in SAP??
And moreover, the editor lock control is not completely trustable. Anyone can change it either in the frontend or backend [table directly]. I mention this i want to implement all my Znamespace components for a client, and all the objects should be only viewed [no change access].
2011 Feb 20 8:08 PM
Authorization object will help you
check this [http://help.sap.com/saphelp_nw04s/helpdata/en/52/67167f439b11d1896f0000e8322d00/content.htm]