how to disable debug access ?

[Former Member]

hi,

i would like to check if there are any users can access to debug mode in production clients or not, how should i go about ?

what are the authorisation objects that allow for debugging.

comment and advice will be highly appreciated.

thanks.

regards,

kent

[Private_Member_119218]

Debugger requires auth. object S_DEVELOP with value DEBUG in OBJTYPE field. Field ACTVT is check to see what the user can do; '01' = Create or Generate, '02' = Change and '03' = Display.

You can use SUIM >> User >> Users by Complex Selection Criteria/By Authorization Values to see which users have the aforementioned objects and values.

Edited by: Martinsh Shaiters on May 22, 2008 12:23 PM

[Former Member]

Which type of debugging are you referring to?

Normally, you can check it via report RSUSR002 object = S_DEVELOP where the field Object Type = DEBUG and Activity is '03' or use '*' for any activity, but at least one. Activity '02' is for the replace function in debug mode and '01' is just about the most powerfull authority in the whole system = system debugging.

Do not include any tcode, except perhaps SE80 optionally to see whether this makes a difference to the result of the report.

But there are other factors as well, such as some system and client settings, and even the user type.

Cheers,

Julius

PS: Sorry for duplicating Martin's answer. I was typing and did not see his answer until after posting.

Edited by: Julius Bussche on May 22, 2008 10:31 AM

[former_member653611]

debug access has to give only for selected users.

for that we need to maintain values in authirization object S_DEVELOP those are

activity '02' in ACTVT field

object type DEBUG in OBJECTTYPE field.

as answered by martins saiters,you can find info for user relevent auth objects

follow suim navigation.

regards,

rajendra.k