04-08-2010 10:36 PM
Hi Friends,
I have a composite role with 2 single roles in it. A tcode can be seen on the menu of the composite role, However that tcode is not part of the menu of the 2 single roles neither under the auth object S_TCODE. However all the auth objects underlying the tcode are part of the 2 single roles.
If I assign this composite role to a user, he is able to execute the tcode.
Could you please help me understand how the user is able to execute it
04-09-2010 5:32 AM
Hi Sindhu Menon,
Do in this way, remove both single roles from composite role and do read menu you will get blank menu and then again add both single roles and do read menu, now check that transaction is available in menu of composite role or not.
Regards,
Firoz.
04-09-2010 5:32 AM
Hi Sindhu Menon,
Do in this way, remove both single roles from composite role and do read menu you will get blank menu and then again add both single roles and do read menu, now check that transaction is available in menu of composite role or not.
Regards,
Firoz.
04-09-2010 8:12 AM
> neither under the auth object S_TCODE.
Are you sure there are no ranges or wildcards in the S_TCODE values? If in doubt, query table AGR_1251 for both roles, filter on object S_TCODE and post the results here, along with the transactions you're talking about.
04-28-2010 4:57 PM
Thank you guys i added the tcode to one of the single roles and did a re-read of the 2 menus