03-25-2015 7:11 AM
Hello,
We have a customised transaction, that displays data for a table in the same way as SCU3 does.
The problem is, giving user's access to this transaction requires them to have access to SCU3 which is forbidden.
The program used calls for transaction SCU3, is there a way to provide access to SCU3 but only for a specific table.
Therefore if user's do access SCU3 they cannot view any other table but the one specified.
Regards
Lindsay
03-25-2015 10:26 PM
If your programs uses calls to SCU3 then you already have a sort of parameter transaction which passes parameters. Quite likely the screen program fields do not support all parameters so it stops in the selection screen, in which case depending on your release you might still be able to add input and hit Enter, or you are kicked out.
A better option is a parameter transaction for START_REPORT on RSVTPROT with a screen variant name passed as parameter and authorize the user correctly for that table log. They might attempt to change the table selection if they can access it, but will be blocked if not authorized -> authorize S_TABU* correctly and then you do not even need to care how they get to the table.
Or create a parameter transaction for SE16 with variant selection on table DBTABLOG directly, but output is less friendly. Also some user might change the layout and selection options are regenerated and then you cannot pass the parameters anymore.
Even better -> give them a parameter transaction to the SM30 view which maintains the table -> via the menu options they can navigate to display changes (as they can access the view data already) and will see the change log (if activated).
Cheers,
Julius
03-25-2015 1:19 PM
Hi Lindsay
How have you built the customised transaction? Is there anyway SE97 call transaction can assist you?
Regards
Colleen
03-25-2015 9:43 PM
Hi Lindsay,
Probably you can try creating a 'Variant Transaction' for SCU3. The below resources should be helpful.
http://scn.sap.com/docs/DOC-27275
http://help.sap.com/saphelp_46c/helpdata/en/bf/ec07845db911d295ae0000e82de14a/frameset.htm
Regards,
Sajib.
03-25-2015 10:26 PM
If your programs uses calls to SCU3 then you already have a sort of parameter transaction which passes parameters. Quite likely the screen program fields do not support all parameters so it stops in the selection screen, in which case depending on your release you might still be able to add input and hit Enter, or you are kicked out.
A better option is a parameter transaction for START_REPORT on RSVTPROT with a screen variant name passed as parameter and authorize the user correctly for that table log. They might attempt to change the table selection if they can access it, but will be blocked if not authorized -> authorize S_TABU* correctly and then you do not even need to care how they get to the table.
Or create a parameter transaction for SE16 with variant selection on table DBTABLOG directly, but output is less friendly. Also some user might change the layout and selection options are regenerated and then you cannot pass the parameters anymore.
Even better -> give them a parameter transaction to the SM30 view which maintains the table -> via the menu options they can navigate to display changes (as they can access the view data already) and will see the change log (if activated).
Cheers,
Julius