Prevent MDG users from accessing t-code XD02

[former_member252154]

Hi

We are implementing MDG 6.1 for Customers in co-deployment mode, meaning users that can create a CR can also access XD02 t-code;

Those users have XD02 in authorization object TCD.

How can we prevent them from using t-code XD02? We do not want them to bypass approval workflows.

Thanks

[Former Member]

Access to the transaction is different than access to actually create data. Your security team can remove access to the transaction itself but leave the CVI authorization. Please discuss this with your security team.

[former_member188878]

I agree Abdulla,you ask your security team to remove authorization for the users from Roles.

[Former Member]

Hi Radis,

This you can restrict in TA : SU21. Maintain/restrict the needed authorization object from MDG object class and regenerate the object.

Regards,

Reema

[former_member252154]

Thanks for this.

I am not sure I got you. Do you want me to maintain TCD object? But we need XD02 there for CVI integration.

[Former Member]

Hi Radis,

The authorization object can be limited to only display instead of create/change. CVI integration should not get affected by this.

Regards,

Reema