- SAP Community
- Groups
- Interest Groups
- Application Development
- Discussions
- Need to remove SA38 , STMS and SCC4 from S_TCODE
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Need to remove SA38 , STMS and SCC4 from S_TCODE
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-09-2010 7:21 AM
Hi Experts,
we need to restrict three critical tcodes like SA38 , STMS and SCC4 from some users.
This is getting via one role in system.
I analysed in object S_TCODE ..But there I found like
$* to SE15 , SE17 to SE37, SE39 to SNLS, SNRO to Z* these range of values.
What is meaning of $* here?
Anyone help me out to remove three tcodes from above range,without affecting other tcode.
Thanks.
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-09-2010 7:38 AM
$
to SE15 means all the tcodes falling in this range are assigned in the Role . Which means SA38 and Scc4 assigned in this role.
You can try the range
$* to SA37
SA39 to scc3
SCC3 TO SE15
SE17 to SE37,
SE39 to STMR
STMT to SNLS,
SNRO to Z
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-09-2010 9:02 AM
> SCC3 TO SE15
I hope this is a typo as SCC4 is still in this range.
Besides that, please keep in mind that this way of so called 'restriction' in general is a very bad idea. Any advice on restricting tcode ranges has nothing to do with SAP security. Controlling your system is a bit more complicated than that.
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-09-2010 3:16 PM
Hi Santhosh,
Jurjen is a kind man with words......I am sure you wouldnt want to hear more from others on the idea of restricting the range
Simple suggestion: Dont do it, dump the idea and build authorizations based on specific needs with specific transactions in the role menu
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-09-2010 3:46 PM
> What is meaning of $* here?
It means you tried to convert field TCD to an org. level and your head touched wood...
Cheers,
Julius
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-10-2010 10:12 AM
