How To Restrict SA38

[Former Member]

Dear Experts,

We have a issue with SA38. We wanted to restrict Executing Programs from Background through SA38.

we have given S_PROGRAM with value action SUBMIT and group * and user has access to S_BTCH_JOB with value RELE and jobs *

When we test with user, he can enter into SA38 and put program and click on "Background" Button and he can still able to execute through background job, and when we see the job log in SM37, job is completed with out any issue.

Why it is allowing user to get that access with out having the value BTCSUMBIT in S_PROGRAM?

Please help and understand me the use of BTCSUBMIT.

Thanks&Regards,

Vijay

[ps0907]

The S_PROGRAM authorization object is more related to controlling access to programs based on authorization group, when the programs are assigned to authorization groups in the first place. If the program being executed has been assigned to an authorization group, then access to it can be controlled with S_PROGRAM. The S_BTCH_JOB is controlling the ability to actually release jobs, which you have granted full access to which is allowing the program to execute.

You would need to assign an authorization group to the program that you want to control first. Then create the authorization for SUBMIT and the authorization group.

[Former Member]

Hi,

As per your query you have to assign SA38 authorisation along with selected objects which he can run.

Regards,

Anil

[Former Member]

Hi Thanks,

My query is whats the use of value BTCSUBMIT for Action field in S_PROGRAM.

Thank you.

[Former Member]

thanks you