Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

user able to execute Tcode after validity of role is over

Former Member
0 Kudos

Dear all,

we have given a temporary access to the transaction MR21 to the user for one day but the user was able to use this transaction after validity of role is over. screen in SU01 shows the role is already expired to her.Is this due to bug or incomplete maintenance nodes in the role

1 ACCEPTED SOLUTION

Former Member
0 Kudos

Ramesh,

Pls go thru the links, I hope your query gets solved.

ask the user to login / logoff

refresh user buffer su56.

Thanks,

Sri

3 REPLIES 3

Former Member
0 Kudos

Ramesh,

Pls go thru the links, I hope your query gets solved.

ask the user to login / logoff

refresh user buffer su56.

Thanks,

Sri

jurjen_heeck
Active Contributor
0 Kudos

Maybe PFCG_TIME_DEPENDENCY isn't running on your system. That should remove the profile corresponding to a role when it's out of validity.

Former Member
0 Kudos

Hi ,

Use SUIM make sure that the user does not have that transaction in any other role in his profiles

second find the role which has the transaction for him .

Delete that specific role/roles

Then run SUPC and PFUD if its a development box or talk to basis if your project policy is to run this as background job.

If all the above steps were already done then use ST01(trace) to find what is allowing the user to succeed with the transaction and disable that object.

Cheers