ChaRM security control on action

Question

Hi,
In the  correction process, we have Developer to set a correction into 'in development' status & have Change Manager to set this correction into 'to be tested' status. There are two actions between status 'in development' & to be tested'. They are 'release transport requests' & 'pass to test'. However, security is not able to control down to the action level. It is only able to control the status level (with the authorization code to each of the status).
Status 'in development'
                   Release Transport Request
                   Pass To Test              
Status 'to be tested'
So, we have a situation that a developer has access to set 'in development 'that allow them to create transport & tasks; however, they also have access to Release Transport Request. This is problematic due to our auto schedule import (every 15 minutes) from dev to qa environment.
It appeared that the authorization will control the action leading to the status change - action to perform 'pass to test' will fail due to status change.
This is standard SAP out of box correction flow. How was intended to be used?
Thanks
Kalven

Answer 1

Hi,
Thanks for sharing Note 1002541 - Extended authorization checks: Single
tasks.
According to the note, we have applied the following:
Object Authorization /TMWFLOW/D (Task in Development Systems)
--> Authorization field: /TWMFLOW/T
--> Value: not to have 3000 (Release Transport Request)
However, it still does not restrict access on "Release Transport
Request" action
Does anyone able to restrict the action of Release Transport Request under In Developement status?
Thanks,
Kalven