Skip to Content
avatar image
Former Member

removal of t-code authorization

Hi,

How to remove authorization for a single t-code from the list of about 500 users.

They have been authorized to this t-code via different roles.

Thanks in advance,

RAMA

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

1 Answer

  • avatar image
    Former Member
    Jan 22, 2008 at 03:40 PM

    It is simpel but a lot of work remove the t-code from every role!

    Edited by: Auke Visser on Jan 22, 2008 4:40 PM

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      >

      > It is simpel but a lot of work remove the t-code from every role!

      I assume that "simpel" has a completely different meaning to the generally accepted meaning of the English word "simple"? 😊

      I dont think it is possible to answer this question in a usefull manner without knowing the transaction code(s)...

      In many cases, removing the transaction code from object S_TCODE (only) is useless (except for stupid end users).

      Relying on the fact that all end users are stupid, can quickly become an occupational hazard for many transactions...

      Depending on the transaction, my recommentation would be to look whether there is an object check upfront in the transaction's underlying coding or a common denominator object which is checked, regardless of how the user accesses the "transaction"... and then restrict those authorization object(s) or remove them entirely if you are sure that the access is not required for what ever reason.

      Some transaction groups have a "base check" function from which you can form an opinion.

      Kind regards,

      Julius