[52759] in SAPr3-news
no authorization in roles, but abap able to go to tocde.
daemon@ATHENA.MIT.EDU (yls177)
Sat Dec 18 05:29:48 2004
To: sapr3-news@mit.edu
Date: 18 Dec 2004 02:29:44 -0800
From: yls177@hotmail.com (yls177)
Message-ID: <c06e4d68.0412180229.15587285@posting.google.com>
But, is the below scenario working as designed?
In the user roles, there are no authorizations to access su01.
However, in the program, there are abap codes to call the transaction
directly and amazingly, the user is able to do so.
Please advise.
