Hi,
The transaction, S_LOG_COM, for executing Logical Operating System Commands, has only 3 field values:
1.COMMAND
2.HOST
3.OPSYSTEM
It doesn't seem like you can restrict a user with the Authorization, to a specific command he can execute, at least from PFCG.
The object might need to be modified, maybe by some coding.
If you have other users who have the transactionSM49 in their profile, and you don't want them to ever be able to run the transaction, I suggest you go to PFCG and inactivate the Authorization object-S_LOG_COM.
Reward points if found helpfull...
Cheers,
Siva.
