Tcode authorization without any role or profile

[Former Member]

Hi Experts ,

Can you please suggest on authorization issue , if observed that one Tcode not given in to any roles or profile but some user still using this authorization.

When I checked role and profile for such user using the SUIM still it shows no data.

So is there any other way to assign direct Tcode without using any role or profile.

Thanks in advance .

[Colleen]

Hi Gajanan

Does it show up in the user buffer? Did you notice it in a trace with RC=0 on a call transaction?

What have you checked so far?

Regards

Colleen

[Former Member]

Hi All,

Thanks for quick reply .

Colleen-

I have check the buffer in SU56 but i didn't found this Tcode and in the trace it give RC=0.

Please check the below screen and suggest any solution.

Thanks

[Former Member]

Hi  Gajanan,

Please check if you have assigned reference user to some users?

Also answers Colleen's questions to give us more clarity.

BR,

Mangesh

[Colleen]

SU56 would pick up or identify if

• reference user
• profile mismatch (PFUD)
• corrupt profile (regenerate profile)
• misread of user access (manual S_TCODE from a role instead of role menu)

[jurjen_heeck]

In addidtion, this may be a called transaction. Investigate SE97 and it's documentation to see what that does.

[Colleen]

I asked about the ST01 RC=0 earlier for that exact reason

[Former Member]

not sure how you are using SUIM to check, just to be sure, use the complex selection method or the authorization values method. the by transaction method only check for transactions that were added via the menu.

look for object= S_TCODE, value=(the transaction code)

SUIM will then calculate if the transaction code was added manually and as part of a wild card or a range.

i.e. if the transaction was MM02 it will be accessible if the S_TCODE had

wild card value M*, MM*, MM0* or

range value A*-Z*

Otherwise, it is possible that it was called indirectly and the BADI does not perform a S_TCODE check.