Solved: how to control someUser can not use Ctrl+Y?

Former Member · ‎08-25-2009

Dear Experts,

because have authorize problem, i want to control some user use Ctrl+Y, how to control it?

Thanks in advance.

Best Regards

Steve

former_member181995 · ‎08-25-2009

Is your Cross Post.

And you are least Likely to get proper replies in ABAP forum unless you are adviced by someone options like

if Sy-uname = "zhuang" ...

I will forward request to move this into Security forums.

@ vikred :You should let the OP know about his cross posting since I can see you are there in both of his threads. I hope you are able to remember your replies at least for a day or two

Cheers

Former Member · ‎08-25-2009

Hi,

I am not sure if that is possible. Clipboard functions are active by default in any SAP system. I dont think that can be controlled.

Regards,

Vik

former_member181995 · ‎08-25-2009

Is your Cross Post.

And you are least Likely to get proper replies in ABAP forum unless you are adviced by someone options like

if Sy-uname = "zhuang" ...

I will forward request to move this into Security forums.

@ vikred :You should let the OP know about his cross posting since I can see you are there in both of his threads. I hope you are able to remember your replies at least for a day or two

Cheers

Former Member · ‎08-25-2009

Hi Amit,

Will make sure to report cross posts such as this if i find in future.

Regards,

jurjen_heeck · ‎08-25-2009

What exactly is your authorization problem? What are you trying to prevent?

Former Member · ‎08-26-2009

Hello,

Sorry to say,but,access to clipboard function will remain active by default even you dont assign any role to user.

So no authrization is needed to disable this,but based on your OS,you can disable at OS level,you can contact your OS administrator to sort this out using group policy.

Thanks,

Prasant K paichha

Edited by: Prasant K Paichha on Aug 26, 2009 5:09 PM

Former Member · ‎08-26-2009

What's the difference to making a print screen, or a photo of the monitor, or just typing it out?

You can control downloads of mass data via object S_GUI, but probably you know that.

On a long shot you might be able to find a way to control the user status on the GUI (B_USERSTAT?). Engineering the GUI is another option, but this is hard to retro-fit as the available registry keys are typically local user ones though I am not sure whether there even is one. They might also be able to change these anyway.

It is easier to question the risk and weigh that against the effort - considering that you can also protect the data from being displayed in the first place.

Cheers,

Julius

Former Member · ‎09-05-2009

thanks all.