Prevent use of Debug with /H

[Former Member]

Hi folks!

Any idea on how to prevent end-users to debug a program/report with just /H ?

We want to restrict the use of this way of debugging for the end-users.

Any help with be appreciated ( with points! )

Regards

[raguraman_c · Accepted solution]

Hi,

Debugging is controlled by authorization object S_DEVELOP and object type DEBUG. With activity 03 a user can still debug in display mode.

As a general practice for production systems, don't grant S_DEVELOP and DEBUG change/replace authority in PRD.

However, if there is a user that has the Authorization object S_DEVELOP, make sure you remove the field value 'debugg' from the object.

Or better still,You can inactivate the Authorization Object S_DEVELOP in your production system for all users.

Ideally, no user is supposed to have this Authorization in the Production System.

This will solve your problem. Feel free to revert back.

--Ragu

[Former Member · Accepted solution]

hi regu,

I have the same problem , i have one user defined tcode . and my requirment is to prevent all user's to use /h debug mode at runtime for that transaction .

i have read your solution , i think it will work , but i could not understand it ,

can you please tell me in detail , what exactly i need to do .

where i will get S_DEVELOP

Thanks & Regards

Akash

[ozair_551]

Hi,

We can restrict the debug access and provide all other access by maintaining Object type in ranges; such that we exclude debug from it.

Object: S_DEVELOP

Field: Object Type

Values

from: ACCO to: CUAD

from: DEVC to: XSLT

Thanks.