Critical BAPIs and Functional Modules

[reza_ahoui2]

Hi

Can someone tell what if these BAPIs are critical hence granting access to them to be restricted? What would be the reason?

BAPI_BUPA_ROLE_*

BAPI_JOBROLE_CLONE

BAPI_USER_*

SUSR_USER_CHANGE_PASSWORD_RFC

BUBA_3

PRGN_BAPIS

SUSO

SU_USER

[jurjen_heeck]

In my opinion it is better to focus on the underlying authorization objects and object classes. Besides that the SAP authorization concept is designed around granting access rather than trying to restrict it on specific functionality.