How can restrict the SQ01 with modules or User Group

[Former Member]

The business requirement is to restrict the sq01 Transaction in PRD with User Group or Modules.

I have not done it until now.

Can someone please advise how can I do it?

Thanks in advance.

Regards,

PT

[Former Member]

Hi Pranav,

The authorization object S_QUERY is associated with TC - SQ01. S_QUERY authorization has 3 permissible values:

02 - Change

23 - Mantain

67 - Translate

Hence you need to restrict the auth. values to have a check on the Transaction code - SQ01.

You can target the check/mantain objects in SU24 which are associated with whichever Transaction code you need to restrict and transport the changes accordingly.

Regards,

Kush

[Former Member]

Hi Pranav,

Incase u wish to restrict the t-code for all the users in a system, another alternative is to lock the tcode using SM01.

Regards,

Kush

[Former Member]

Locking a tcode is hardly ever a usefull security mechanism nor a good idea....

What about SQ02?

Cheers,

Julius

[Former Member]

Hi Julius,

Do we possess a better option to restrict the same?

Regards,

Kush

[Former Member]

OK,

Here is the situation->

The Role that has SQ01, has been assigned to the power users from SAP COE Team as well and they have been using in the PRD to create queries,but not to business users.

I do not want to use the same tcode in more than one Role, that would be against my role design.

My question is still out there without any good answer-

How can we restrict the users for SQ01 with the user Group and Modules ?

Please advise.

Regards,

Pt,.

[Former Member]

Hi Kush,

I was only refering to locking the tcode in SM01 as not being particularly usefull in this case and particularly useless and even dangerous in general. I am not a fan of locking tcodes...

@ PT: Why don't you create the queries in DEV, then check them (also for performance, as well as the "module") and assign them to groups which the users in PRD are later authorized for when you transprt them?

Cheers,

Julius

[Former Member]

Hi,

Please goto SQ03, and select the query areas (under environment) and select standard area (client-specific). Later on enter the query group name and click on create button. A dialog box will be displayed asking for description. enter the and save.

Now click on assign users and infosets. Again click on "Assign infosets" (you need to convert your queries as infosets before itself) and select the appropriate infosets for that particular user group and save.

In the same SQ03, you have another section user group assignment. In future or now you can enter the user name here and click on change. You will now see all the user groups which you have created. make the necessary assignments here.

Thanks,

Gowrinadh