Making BPC Production System non-modifiable for configurations
We've a client which has 3 BPC systems:
- DEV Development
- TEST Testing
- PROD Production
We would first setup in DEV and transport to TEST for testing.
Once UAT has passed, the config will be transport to PROD system.
However, we noticed that a user with full task profile can still amend logic scripts, business rules, data access profile etc.. in PROD system.
Is there a way to "lock" or make the system not modifiable for such config settings?
I know one way is to restrict the user's authorization in task profile but is there a general setting which can lock the PROD system from being changed?
Changing of dimensions are ok but logic scripts, business rules changes should be made non-modifiable.