DevOps and System Administration Forum
cancel
Showing results for 
Search instead for 
Did you mean: 
Read only

SE38 for 2 programs

former_member643677
Participant
0 Likes
1,987

Hi All,

My users run SE38 only to execute these programs:

RFVD_CHK_REMOVE_CLEARING

RFVD_CHK_POSTED_RECORDS_VDBEPI

Can you please guide me , how can I restrict the access to those programs?

thanks

José

4 REPLIES 4
Read only

jmodaal
Active Contributor
0 Likes
1,718

Hello,

you can create a "Report transaction" in SE80 for each of the programs. Then assign authorization to the report transaction(s) to the users and withdraw SE38 / SA38 authorization.

Read only

0 Likes
1,718

Does anyone know how to do this by using authorization Objects?

Read only

S_Sriram
Active Contributor
0 Likes
1,718

Hi Jose.

As rightly said by Jan, from the stand program, creat the new Z-transaction code with the help of ABAPer, assign the same transactions to business users, in that you will get the authorization objects.

Regards

SS

Read only

jmodaal
Active Contributor
1,718

Hello,

as the proposal is about replacing the report execution via SE38 with a report transaction the authorization object is S_TCODE.
For offering program RFVD_CHK_REMOVE_CLEARING in a transaction create a report transaction in SE80.

Then create a role using transaction PFCG, add S_TCODE with the name of the report transaction to the role. Assign this role to the user(s) who should be allowed to execute the program. Finally withdraw the authorization for SE38 / SA38 from the user(s).

There might be some other authorization objects coming up (S_PROGRAM as well as maybe some authorization objects required during the execution of the program RFVD_...). An authorization trace (ST01 or STAUTHTRACE) can discover all of them.