Options for Providing Auth Values - Exclude one particluar value

[Former Member]

I have situation to exclude only RSUR002 for the auth field OBJNAME under S_DEVELOP. How this ca be achieved? Also, can some one give me the various options for providing Auth Values to the fields like A* - AM* and B* - F*.

[Former Member]

Hi,

If you are looking for activity values, you can lookup the table TACTZ. This will provide you with all the valid activity values for the authorization objects. Once you get the list you can setup the range list accordingly.

For RSUSR002 exception you can use a range like --- (RSUSR000 - RSUSR001) ; (RSUSR003 - RSUSR999)

--- Dipesh

Edited by: Dipesh Dutta on Oct 20, 2011 11:03 AM

[Former Member]

Use a ranged naming convention which excludes that value.

If you are just removing RSUSR002 from S_DEVELOP then it is highly possible that users will still have the auths to bypass your restriction anyway.

[Former Member]

What is your problem with this report?

Some jobs might reschedule themselves and the programs might use the develepment workbench tools (functions) to do this.

In SM36/7 you can also use S_DEVELOP now. Prior there might not have been checks as all reports do not respect tcode checks.

So you should not exclude one. If anything then you permit one.

Or you resrict the entry points and permit some which are plausible and well developed (crispy on the outside but soft on the inside).

Cheers,

Julius