Reg : Restriction of creation of transaction code

[Former Member]

hi all,

I want to restrict creation and deletion of transaction codes (Y or Z).

How to get done it.

We use SE93 and SE80 to create T-Code, ( Is there any t-code to create y or z t-code)

We can restrict SE93 to create or delete t-code, but we cant restrict SE80 as we create many other objects in SE80.

Suggestions reg this.

[former_member181995]

Jean,

from SM01>give SE93 in below text box>mark the lock box>save and come out.

and for unlocking follow same procedure with unmark the checkbox.

Amit

[Former Member]

thanks for your rply amit,

eventhough we lock the transaction code se93 in sm01, it is allowing to create t-code in se80.

so what shall i do ?

Edited by: jean liker on Aug 6, 2008 6:49 AM

[kiran_k8]

Jean,

When you do screen debugging the tcode se93 while creating/deletion of a tcode it takes us to

Program SAPLSEUK

Include LSEUKI01

process after input.

module exit_tcode_menu at exit-command.

field tstc-tcode

module xcode_390.

Under this module xcode_390 we have the code which performs the creation/deletion of the tcode

when 'ADD'.

call function 'RS_TRANSACTION_ADD'

exporting

objectname = tstc-tcod

exceptions

already_exists = 01

permission_failure = 02.

if sy-subrc = 1.

message id sy-msgid type 'E' number sy

with sy-msgv1 sy-msgv2 sy-msgv

else.

*******************

when 'DELE'.

call function 'RS_TRANSACTION_DELETE'

exporting

objectname = tstc-tcode

exceptions

not_excecuted = 01.

if sy-subrc ne 0.

message id sy-msgid type 'E' number

with sy-msgv1 sy-msgv2 sy-ms

endif.

The same for CHANGE too.Try to put a validation here

if sy-tcode ne 'SE80' and also the SY-MANDT in the if condition.In addition to this lock SE93 using SM01 too.

But when we debug through SE80, it is taking us to

Progrm SAPLWB_INITIAL_TOOL

Under this program we have an INCLUDE LWB_INITIAL_TOOLO01

form set_status_0100.

data:

l_disabled_functions type ui_functions.

call method g_initial_tool_ref->if_wb_program~wb_manager->get_status

importing

P_DISABLED_FUNCTIONS = l_disabled_functions.

SET PF-STATUS 'INITIAL_TOOL' excluding l_disabled_functions.

SET TITLEBAR 'WBM'.

clear g_fcode.

endform. " SET_STATUS_0100

Or just try to disable the option CREATE and DELETE in the above program.Just try these options,may be you will get some lead.Mind you both are SAP Standard Programs and needs accesskey.Also check whether your requirement is worth enough to tamper with SAP Standard code

K.Kiran.

[former_member181995]

Jean,

You cna use S_TCODE authorization object ... use S_TCODE to restirct the transaction for a USER . but contact the BASIS they need to do this work

Amit

[Former Member]

Thanks for all