07-25-2016 12:41 PM
Dear collegues ,
hope every thing is OK
actually i am trying to prevent some Developers accessing or viewing specific objects "developed programs".
how to exclude specific programs from accessing by specific developers ?
Ahmed
07-25-2016 2:42 PM
07-26-2016 7:50 AM
then , how to exclude the programs ?!, actually it is just 10 Developed programs i don't want to be accessed by all developers .
07-26-2016 9:12 AM
Firstly, secure the programs by assigning the authorization group. This would usually done by the developers during program creation.
Defined authorization groups are listed in table in TPGP.
You can review the existing authorization group assigned to a program using table TRDIR.
To assign programs to authorization group, you can use report RSCSAUTH.
Based on your requirement you can restrict using authorization objects S_PROGRAM and/or S_DEVELOP.
Following thread may also provide you more insights: https://scn.sap.com/thread/778538
07-26-2016 11:31 AM
thanks Ravikiran
good idea , done with programs , but, how can we assign authorization group to Function module
07-26-2016 12:49 PM
For Function Module, we need to consider for function group and not authorization group.
Access to execute function module can be provided using Authorization object - S_DEVELOP.
OBJTYPE: FUGR
OBJNAME: <Function module's function group name>
P_GROUP: *
ACTVT: 16
For more details on S_DEVELOP please refer to SAP Library
To find out function modules of a function group, please refer to existing thread
07-26-2016 1:09 PM
don't forget to remove the authorization for debug/replace from your developers.Otherwise they can bypass the checks... 😉
Bernhard