11-03-2009 9:14 AM
We have a problem with tcode SE10.
We created a display role with SE10 to be able to view transport request. However it is possible (when a user is in SE10) to go (via the menu) to edit project. There it is possible change the project status switch. These switches are connected to CHARM and therefor we don't want to have any changes to these switches.
Does anyone have a solution for this. We already tried to analyze a trace file, but it seems that no authorization checks are performed when executing the actions above.
Thanks!
11-03-2009 2:24 PM
Hi,
Check the values on the object S_CTS_ADMI, ensure that the values PROJ is not assigned..........let us know the result
11-03-2009 2:24 PM
Hi,
Check the values on the object S_CTS_ADMI, ensure that the values PROJ is not assigned..........let us know the result
11-03-2009 4:39 PM
thanks for the update. We already checked this.
The user in question is not authorized for the authorisation object S_CTS_ADMI.
The tracefile does not indicate this object as a missing authorisation object to perform the action.
As said before it seems that no authorisation check is performed at all.
09-01-2010 2:33 PM
hello,
did you find a solution for this? we just realized also that many users have the authorization to change the project status switches only by having SE09 and S_Transport with activity 03.
thanks,
david