user exit SUSR0001 - Is it possible to limit the sessions/windows to 1?

[Former Member]

Hi all!

I have put the question already to to "SAP GUI" forum but I didn´t get a solution. Perhaps somebody here might help.

Is it possible set the number of possible sessions/windows for certain (not for all!) users to 1?

Background: I want to do an additional user validation during logon via SUSR0001. But the user is able to click the top left corner of the dialog windows and select "create session".

Is it perhaps possible to disable this function? Or does somebody know the the information about the number of sessions is saved??? Then it might be possible to enque this table.

Thanks for your help!

Peter

[Former Member]

Hi Peter,

There are 2 tables

USR08 "Table for user menu entries".

USR30 "Additional Information for User Menu"

As we see in include "LSUSFF01"

we create session using function 'GRAPH_USER_MENU'

before calling this we can check condition (if Z =>1) for one session using ur exit(mentioned).

my access to some Tcode are limited.

I think this migt b helpful for u.

Regards ,

Ranjit Thakur.

[Former Member]

Hi Ranjit!

> There are 2 tables

>

> USR08 "Table for user menu entries".

> USR30 "Additional Information for User Menu"

Okay, I will check these tables. but were are the information stored for example about the numbers of sessions? Or where can I get information about the parameters of ThUserInfo?

> As we see in include "LSUSFF01"

> we create session using function 'GRAPH_USER_MENU'

> before calling this we can check condition (if Z =>1)

> for one session using ur exit(mentioned).

> my access to some Tcode are limited.

Yes, this is one approach. But the situation is like that: I call one screen during logon to introduce a password for some checks. And at that time the user can open a second windows with the system menue in the upper left corner and can work on in this windows and bypassing my password window... :-(((

CU

Peter

[Former Member]

May be you have to modify tranaction: session_manager and use function module TH_USER_INFO

to check the current count of sessions during login status.

[Former Member]

Hi Michael!

> May be you have to modify tranaction: session_manager

> and use function module TH_USER_INFO

> to check the current count of sessions during login

> status.

Thanks for your answer! But a modification is the last thing I want to do... ))

CU

Peter

[Former Member]

Hi peter,

1. This is a part of configuration

/ parameters

which the basis team can do.

2. We can set the limit for maximum number of

sessions.

(By default, max is 6)

3. That can be changed.

regards,

amit m.

[Former Member]

Hi Amit!

> 1. This is a part of configuration

> / parameters

> which the basis team can do.

Please explain that a little bit more. I am confused what you are meaning.

> 2. We can set the limit for maximum number of

> sessions.

> (By default, max is 6)

But this works for all users. I want to limtit the number of sessions to 1 just for certain (!!!) users.

> 3. That can be changed.

Please explaint too.

CU

Peter

[MichaelTe]

Hello Peter,

the profile parameter mentioned here is:

rdisp/max_alt_modes

. You can set this parameter dynamically via transaction RZ11.

See also note: 142724 and 12466

Regards, Michael

[Former Member]

Hi Michael!

But this profile parameter works for ALL users. I just want to do that for certain (super-) user.

CU

Peter

[Former Member]

Hi Peter,

When u r doing extra password check or something in ur screen , u can set a variable. which will in turn u can use in the IF condition...and reset then variable after that .

I think this will help u.

Regards ,

Ranjit Thakur.

[Former Member]

Hi Ranjit!

When u r doing extra password check or something in

ur screen , u can set a variable. which will in turn

u can use in the IF condition...and reset then

variable after that .

No, that doesn´t work. As I told when a windows popups there is always the possibility to open another window through the system menu upper left corner and then work on the second window.

CU

Peter

[Former Member]

Hi Peter,

Try to Deactivate the calling screen in PBO of called Screen.And after that password check will be done.and in PAI of that screen Again Activate the Calling SCreen.

Hope This will solve ur problem.

Regards,

Ranjit Thakur.

Please Mark the Helpful Answer.

[Former Member]

Hi Ranjit!

> Try to Deactivate the calling screen in PBO of called

Yes, but how? How can I prevent to open a new window with the system menu option "create session"?

[Former Member]

Hi Peter,

Please check the program "SAPMSRD0" in se80 and see the

PBO Modules ,It will give u the idea what standard program is doing.

And try to open 7th when debugging mode(/h) is on.

Regards,

Ranjit Thakur.

Please Mark The Helpful Answer.

[Former Member]

Hi,

In connection to this discussion, can I restrict dailog user loggings on central instance.

Example: I have 3 dailog instance and one central instance.

I want to restrict dailog users loggin on to central instance and allow only few dailog admin users on to this and allow general user on only the dailog instance.

all the dailog instance are in logon group and the central instance is out of group.

How can I utilize the user exit.If any one could give the user exit code, it will be graet help full.

Kumar