We have a customized copy of SAP_SM_BASIC_SETTINGS. It is a direct copy with no changes but has been customized so a generated profile could be created and the roles assigned to Basis users.
Now, auditors are insisting that SE37, SE38 and SE80 be removed from S_TCODE. While I believe this is overkill, I still have to make it happen.
The problem is that the Standard S_TCODE has a mystery range in it from "NO" to "YS" (NO to Yes?). It is not on the menu of either the SAP delivered role or the custom copy, but it is in the Standard S_TCODE. I cannot remove it because I cannot find it and the standard Authorization is not modifiable except by changing the menu.
Your help is very much appreciated.