TCD field in display mode in S_TCODE

[Former Member]

Hello,

I have a requirement to remove t-codes from TCD field under S_TCODE object in the role itself and NOT from the role menu.However when I go to PFCG>Change>Auth.Data Tab>Change auth.data>, the field TCD is DISPLAY only and hence removal of t-codes cannot be done.

Why is this and what would be the workaround.

Thanks.

Mani

[jurjen_heeck]

Hi Mani,

This is working as designed. It's made that way to enforce transaction maintenance in roles through the menu only.

Why do you want to edit S_TCODE directly? What good would it do for users to have transactions in their menu which they can't execute?

Jurjen

[Former Member]

Thanks Jurgen.

How is this 'transaction maintenance in roles through the menu only' enforced? I was able to make the changes in 9 out of 10 roles. Only one role has this display issue.

Mani

[Former Member]

Mani,

Is the role in trouble assigned to a customizing project?? This is done via utilities -> customizing auth. In this cases you have a message like :"Customizing projects are assigned. The menu can only be changed by deleting individual nodes"

Cheers,

Diego.

[Former Member]

 I have a requirement to remove t-codes from TCD field under S_TCODE object in the role itself and NOT from the role menu.

What possible reason could this have? Do they like to be able to just look at it?

Cheers,

Julius

[Former Member]

Please Don't try to change the way SAP is....we can customise the software, but that doesn't mean anything can be possible out of our wildest dreams!!!

I am sorry, but unlike others I won't ask the reason for such requirement, but would only say..This is NOT possible.

You can't maintain S_TCODE unless you have inserted a node to it Manually. If you want to maintain S_TCODE which is automatically populated when tcodes added in Role Menu, please build SAP from scratch.

[Former Member]

Thanks Debmalya.

The issue is - why the change is possible for certain roles and only for this role, Would not a PFCG Change function allow you to 'Change' field level values.

Also as Diego has suggested , I have verified that this role is not part of a customizing project.

This requirement is from one of a remote customer my organization supports.

Mani

[Former Member]

This requirement is from one of a remote customer my organization supports.

Have you considered going for some basic training in role maintenance?

Also see this wiki --> https://wiki.sdn.sap.com/wiki/display/Security/QAMetricsforRoleDesign

Cheers,

Julius

[Former Member]

Thanks Julius.

What I meant is the reason for this requirement by the customer is unknown.

I still standby my question.

Mani

[Former Member]

Fair enough.

Tell them it is not possible, not intended and generally regarded as silly to attempt.

You can also quote me

Cheers,

Julius

[Former Member]

I think already all the gurus posted their comments here answered your question,,As you said only one role has the issue,Just check how this role created,By adding Transactions or From Menu...?

Please follow the tips Gurus mentioned in the post,Clients will ask whatever they want,but its the duty of Us to tell them whats Sap Best practices