[52760] in SAPr3-news
Re: no authorization in roles, but abap able to go to tocde.
daemon@ATHENA.MIT.EDU (Jens Hoetger)
Sat Dec 18 07:00:07 2004
To: sapr3-news@mit.edu
Date: Sat, 18 Dec 2004 12:59:43 +0100
From: Jens Hoetger <Jens.Hoetger@de.bosch.com>
Message-ID: <td58s0lc8dldhm7q7cifk6psv2qfjqg6lk@4ax.com>
On 18 Dec 2004 02:29:44 -0800, yls177@hotmail.com (yls177) wrote:
>But, is the below scenario working as designed?
>
>In the user roles, there are no authorizations to access su01.
>However, in the program, there are abap codes to call the transaction
>directly and amazingly, the user is able to do so.
>
>Please advise.
Hello,
and if fails if the user tries to start transaction SU01?
Check settings for authorization object S_TCODE in transaction SU24
and AUTH_SWITCH_OBJECTS. In SU24 check also settings for the
transaction the user uses when calling SU01 works.
How does the ABAP code looks like? Does it use "Call transaction" or
does it use a function module?
--
Jens Hoetger
-> http://www.scribblepapers.de.vu
