SE38 Restrict Execution of Program and Allow Create Variants

[Former Member]

We are looking for a way in our Production environment, to restrict SE38 from allowing the execution of any programs, but all the creation of variants.

Any feedback would be greatly appreciated.

Thanks in advance.

Pam

[Former Member]

Not sure whether it is advisable to assign groups to all programs (actually it is a primitive mechanism) but you can use transaction VARCH for more granular control between variant maintainance and execution.

There are two options to protect report variants against plebians if execution should be unhindered.

If you have outsourced client '000' then you must use the user protection.

If you have control over client '000' then you can use custom system variants (can only be changes in client '000'.

S_PROGRAM is not an option for you really...

Cheers,

Julius

[Former Member]

Hi Julius thanks for the reply.

I am using VARCH for changing variants, however, it doesn't allow creating variants.

Thanks

Pam