We are working on a requirement to make MIGO transaction Display only .
The initial thought is to make all the objects required for MIGO haing activity 03.
We have done that already but realised that it is very easy to make it executable if any of the objects present in this role has excute access in any other role possessed by the user
Could any of you let me know your thoughts on this ? How we can make MIGO transaction display only ?