No Tcode Auth, but user is able to access the tcode

[Former Member]

Hello All-

we recently upgraded from 4.6C to ECC 6.0.

we have an issue, where the user in not authorized to Tcode ME43 in any of the roles / profiles that are assigned to him.

Interestling he is able to work with that tcode in 4.6C & now in ECC 6.0

Checked table AGR_1251 table for each role the user has... no luck.

There are about 20 Ztcodes assined in one of the roles.

Is there a possibility that one of the Ztcode calling ME43 ?

If yes, how do i figure it out?

Is there a possibility that a SAP std.tcode internally calling ME43?

If yes, how do i figure it out?

What could be the other chances???

Note: profiles like SAP_ALL etc are given to the user. He has the profiles that are generated from the roles that are assigned.

No extra.

Thanks in advance.

VJ

[jurjen_heeck]

> There are about 20 Ztcodes assined in one of the roles.

>

> Is there a possibility that one of the Ztcode calling ME43 ?

> If yes, how do i figure it out?

My first guess would be to talk to an abaper within the origanization. They should know that.

> Is there a possibility that a SAP std.tcode internally calling ME43?

> If yes, how do i figure it out?

Have a look at tr. SE97 and/or do a forum search on "called transaction"

> Note: profiles like SAP_ALL etc are given to the user.

I suppose you meant to write " are not "

Jurjen

[Former Member]

Hello Jurjen,

Thank you.

You are true, there are no extra profiles like SAP_ALL given to the usre.

need to check..on SE97

[Former Member]

Hi,

Run an ST01 trace on the user for the tcode ME43 and you will get to know the objects that are being used in the role.

May be you can restrict them(without effecting other tcode usage)

Rakesh

[Former Member]

Interestling he is able to work with that tcode in 4.6C & now in ECC 6.0

Is the user able to run the transaction ME43 directly ?

If yes, i would check the roles for S_TCODE object in SUIM.

Is there a possibility that one of the Ztcode calling ME43 ?
If yes, how do i figure it out?
Is there a possibility that a SAP std.tcode internally calling ME43?
If yes, how do i figure it out?

Yes, you can find what all tcodes call ME43.

1. Go to SE93, enter transaction code ME43

2. Click "Where-used", deselect all except "Transaction"

3. Execute it, this will give you list of all transactions calling ME43.

I would recommend copying them in an excel sheet and doing a vlookup to see out of the "about 20 ztcodes" which are calling ME43

Regards,

Zaheer

[Former Member]

First of all, how and where are you finding this "but user is able to access the tcode"?

- ST01 trace?

- SU53?

- SM20?

- Developer trace?

- The user themself?

There are some differences.... you need to provide that information first.

Cheers,

Julius

[Former Member]

Hello,

Please check with the roles that was assigned to the user for the transaction ME43.

Try to check at the authorization level at S_TOCDE, rather than checking at Menu level in the roles.

Regards,

VeerendraKumar.

[Former Member]

> Try to check at the authorization level at S_TOCDE, rather than checking at Menu level in the roles.

Yes, that is a good point - but we need to wait for to get back to us with more infos.

The quality of the answer is usually directly proportionate to the quality of the question...

[Former Member]

Hi,

I suggest you start transaction su56 for that user and do a search on s_tcode and analyse this if there are no * or ranges that gives the possibility to start the meant transaction.

Have fun

Bye Jan van Roest