Showing results for 
Search instead for 
Did you mean: 

How to restrict auth on CRM GUI without restricting on WEBUI.

Former Member
0 Kudos

Hi All,

We are SAP Business users are using SAP CRM 7.0. and want to restrict usage GUI by PFCG for end user. End user should be allowed only WEBUI to enter CRM.

We have removed CRMD_ORDER transaction auth from PFCG role but users can still use individual transaction link in GUI like CRMD_BUS2000126 for activity creation.

If we remove this also then users will not be able to create activity from WEBUI also.

If you have any solution so that users can be restricted to use only WEBUI and not GUI without changing PFCG role then please suggest.

Will give point for best suggestion.


Accepted Solutions (0)

Answers (1)

Answers (1)

Active Contributor
0 Kudos

Hi Amol,

Maybe you can try BADI CRM_ORDER_AUTH_CHECK, method CRM_ORDER_ADD_AUTH_CHECK. There you can restrict the use of business transactions using some logic, like checking sy-tcode (I guess webui doesn't use any) or by checking if webui bol model is currently set in memory.

Kind regards,