Function RS_HDSYS_CALL_TC_VARIANT security

[Former Member]

Good morning everybody.

We have got users in our developement environment with access to transaction SE37 . We can see that the are accessing to function RS_HDSYS_CALL_TC_VARIANT, so, if they fill in blanck the authority check field, they can jump to all system transactions. They need to access SE37 transaction but we are looking for they way to take out permissions only for this function.

We have created a test role with only SE37 but we can't find the way to do this issue.

Is there any way to remove access to a single function?

Thanks a lot and best regards

[Former Member]

Hi,

Yes what pramod has suggested will help you to solve the issue.

Go to tcode "PFCG" give the role name ...the do the process whts Pramod has Suggested

Cheers

Vivek D Jadhav

[Former Member]

Hi all.

Really thanks a lot for your answers.

We have checked S_DEVELOP object authorization. As you told us, we have added type FUNC but our doubt is how to add all functions except one, because it's impossible to add all thousand of functions in this field.

Perhaps we don't understand well this fields of the S_DEVELOP object authorization.

Any help will be great.

Thanks a lot in advance and best regards.

[pramod_gopisetty1]

Hi,

The FM is part of Function Group SHD0,

Navigate to transaction PFCG and check the Object S_DEVELOP

and in that Object Type FUNC and Object Name "all the FM except the one for which you don't want to give access".

That way you restrict the users not to have access to FM.

Hope this helps.

Cheers-

Pramod