05-24-2010 9:46 PM
Hello Security Experts
We have lot of custom reports in our SAP system which were developed over the last 10 years. We were wondering if all of these reports are still being used by our user group.
So I am trying to find out when was the last time a particular report transaction is used and by which user.
Is there a way to find this out?
Appreciate your help in advance since this helps a lot in identifying redundancy and also clean our roles.
Thanks
Satya Alapati
05-24-2010 10:20 PM
Can you imagine how many times this question has been asked...?
Please post a comprehensive solution as follow-up and I will add it to the FAQ sticky thread (which will also help you further...)
Cheers,
Julius
05-25-2010 5:06 AM
Hi,
go to STAT Transaction, there give the Transaction required.
but it has a time lmitation like 3 months past only like that.
But STAT,does not exist in ECC 6.0.
Regards,
Chaitanya.
Edited by: Krishna Chaitanya on May 25, 2010 9:37 AM
05-25-2010 5:17 AM
Hi Staya
Check for SDN threads related to trxn ST03N.
Thanks.
Anjan
Edited by: anjanpandey on May 25, 2010 6:17 AM
05-25-2010 6:05 AM
Hi,
try this method.
go to database view TRDIR and give the program name in field (NAME) and check the field UDAT for last changed date.
Regards,
Chaitanya.
05-25-2010 8:58 AM
Get the right results by searhing in SDN using google, enter the below text. You will get many threads which are discussing your problem
site:forums.sdn.sap.com transaction last used
05-25-2010 9:01 AM
Hi Satya,
you would have to research more on the topic than what i am suggesting, but you could have a look at the table RSEUMOD and the program /1BCDWB/DBZ0RUN
I replied then checked the other posts......do you want to check on the transactions that were last used (or) is it a check for the reports that were last executed?
Edited by: Shekar.J on May 25, 2010 10:03 AM
05-25-2010 7:57 PM
Hello All
Thanks for all your replies.
Hi Sekar - I wish to check both T Codes and Reports since some users have access to T Code SA38 / SE38 and they use that and call report directly instead of using T Codes.
Thanks
Satya Alapati
05-25-2010 9:59 PM
Hello,
The data that you are looking for is kept in the transaction monitor (ST03N). However, there is not a very direct way to get to it. It would require dumping all "Z" or "Y" transactions out of the TSTCT table. Then you could compare the "Z" transactions that are part of the user history tables in ST03N, which means that at least during time that your company keeps user history (default from SAP is 90 days), some user has executed them.
Then comparing the list from TSTCT with the list from ST03N you will look for the ones that do not show up on both lists which will be the ones that have not been used. The unused ones will be your 'suspect' list for possible deletion. I would suggest finding out who the functional / business owners are and send individual lists to them stating that by some definite date in the future, security will delete the unused transactions unless the business provides a valid case for keeping them. The issue with getting the data using this approach is that working with ST03N in this fashion is cumbersome.
SAP also provides a fixed price service that will give you this information among other reports such including: what transactions each user has used during the time frame you keep user history; any custom objects that have SoD relevance based on SAP's standard GRC AC rule set, etc.
Cheers,
Larry Justice
05-25-2010 10:11 PM
You should however be carefull of this at face value (on the presentation server) as the data is aggregated and renamed in the report/transaction field.
This use of data from table MONI and the stat files is more co-incidental for security than reliable.
The correct tool with context information is SM19, but it is not a christal ball into the past..
I do agree with you that if you have nothing else then the ST03N data is usefull, but there are "disclaimers" required... For example the "unused ones" may contain form routines used externally. This is still quite popular amongst sime ABAPers.
There is a post by Frank Buchholz which explains this in detail if you search the FAQ thread.
Cheers,
Julius
05-25-2010 10:33 PM