09-23-2011 9:35 AM
Hi All,
We have created a traansaction variant to hide a icon in SQ01 tcode using SHD0 and assigned it to two users.
It works for one user and the other still able to access the icon.
Could anyone please guide me to come out of this issue.
Thanks in Advance,
Thiyagu.
09-23-2011 10:18 AM
09-24-2011 7:55 PM
Hi,
See what other roles/profiles user has? If you have assigned the variant transaction to the users, it can't behave separately for the users.
Regards,
Raghu
09-24-2011 8:16 PM
There is a difference between a variant transaction and a transaction variant.
This here is a transaction variant --> the core transaction is executed with a different screen variant.
It can be assigned globally to the core transaction or user specifically in table SHDSTUSR. It supports different screen variants for users who have the same roles / authorizations and are starting the same transaction.
In the case of variant transactions, the users start different transactions which call the core transaction using the different screen variants passed from the calling transactions.
Personally I try to use this very restrictively and only if authorizations are not possible to distinguish between activities and I also check that there are no ok-codes for the invisible function keys and main menu task bars.
9 times out of 10 it is not really secure and created confusion, but looks nice to the user and confuses admins and audit false-positives... particularly variant transactions if the auditor also assumes that a transaction code is needed to be able to actually do something.
So... some companies create myriads of variant transactions to duck under SoD rule sets. The auditor needs to also check the "where-used-lists" of the core transactions....
However.... as an admin wanting to maintain this thing you and those who maintain it after you will have to be able to find them (user check tables and transaction where-used-lists) as well when trouble shooting... ;-((((((((((
Cheers,
Julius
09-25-2011 7:03 PM
Hi Julius,
I should read between the lines Thanks for the detailed information.
Regards,
Raghu
09-29-2011 12:49 PM
Hi Julius,
Thanks for your detailed explanation.
As you said, my issue is related to screen variant.
I once again thank you for your valuable reply.
Regards,
Thiyagu