Removal of t-code

Hi All,
We want to remove a t-code from a display role where the
menu is not maintained.
The S_TCODE is given as *. (Full authorization)
how to go about the same. If we remove that from S_TCODE
we need add all other entries which is very difficult.
Please advise.
Thanks,
DVRK

> I think the best option is to create ranges with wildcards excluding the transaction you need to exclude.
Oh dear, I personally think this is about the worst option
Like Julius said, better rebuild the role, after redesigning it of course. And put all required transactions in it via the menu.
One very important thing about SAP security is that it is about allowing stuff, not about denying. So giving a user all rights and taking away a few is not the road to follow. A role with * in S_TCODE should never be called a display role as it is bound to have several security loopholes in it and the same goes for a role with tcode ranges. You'll be amazed how many programs can be started through more than one transaction.
Another example of risks involved: Everytime a new transaction is introduced into your system, either by your own developers or by SAP, it is automatically executable via your display role, whether it is a display transaction or not.....
Better have the users specify what they want to display and which transactions they need to do that and don't take "all" for an answer.
Jurjen
P.s.,
Carlos, asking for rewards is against forum rules.
Edited by: Jurjen Heeck on Oct 23, 2008 8:39 AM

Similar Messages

  • How to remove the autogenerated code in F M- 'MAT_MOVE_BMMH1_MARA'

    Hi,
    I added the custom fields in MARA to upload the LSMW.So i added the enhancement in LSMW program RMDATIND.It is working fine now.Then,i need to remove the code from that.where i could removed only the enhancement.(Note: when the enhancement is added in RMDATIND program which writes the code for structures automatically).
    But it is not removing the code from the functional module "MAT_MOVE_BMMH1_MARA'(RMDATIND) because which is autogenerated the code in the FM from the program "RMDATIND".And also its asking the ACCESS KEY since it is a standard program.
    So i need to remove the autogenerate code in FM - MAT_MOVE_BMMH1_MARA.
    Thanks for your kind reply..

    Hi there,
    The function module "MAT_MOVE_BMMH1_MARA" has status 'Not released'.
    The release status is visible in the Attributes tab in SE37.
    According to the note
    415983 Modification/customer developments of SAP function
    109533 Use of SAP function modules
    Attributes. Some of the reasons why internally released Function
    modules are not documented are as follows;
    - too much overhead
    - internally released function modules are often changed and updated
    - are designed for specific purposes by the relevant Application
    Developers etc.
    SAP does not support problems that occur if the customer used non-released function modules.
    Many thanks,
    Mohammed Hussain.

  • HT4623 how do i remove the security code on the screen

    how do i remove the security code on the screen   just installed 7 and did not have that before

    After installing your iOS on your device you will be asked to "Create a Passcode" you should have the option to skip this, or if you've set one up you can turn it off by going to: Settings>General>Passcode Lock
    Regards,
    Steve

  • HT201209 My child received a $50 voucher for Xmas but doesn't want to use it all at once. I'd like to remove the voucher code so I can purchase items from iTunes using my usual account. Is this possible?

    My child received a $50 voucher for Xmas but doesn't want to use it all at once. I'd like to remove the voucher code so I can purchase items from iTunes using my usual account. Is this possible?

    Hi czigrand,
    Thanks for visiting Apple Support Communities.
    Currently, you can gift dollar amounts or individual items (EG. songs) on the iTunes Store. See this article for more information:
    In the iTunes Store, you can gift a dollar amount or specific music, movies, TV shows, or apps from your iPhone, iPod touch, iPad, Mac, or PC. Follow these steps to send a gift from the iTunes Store.
    iTunes: Sending iTunes Gifts
    http://support.apple.com/kb/HT2736
    Best Regards,
    Jeremy

  • Removal of T.Code from role

    Hi all,
    i have to remove a t.code FBRA from all the plants users, there are 40 single roles, with T.Code FBRA,  how can i remove it at a time, without deleting individually in each roles. Is there any method , plz let me know.
    Thanks & Regards
    Syed..

    Hi Syed,
                 Are you using a role which is created by using the standard role.
                 Copy the role to a new role then delete the transaction from the role
                 and assign the user with the newly created role. I think this would be one of the possible way. After that remove the users from the previous role.
    Please reward points if helpfull.
    Regards,
    Vamshi

  • Removal of t-code authorization

    Hi,
    How to remove authorization for a single t-code from the list of about 500 users.
    They have been authorized to this t-code via different roles.
    Thanks in advance,
    RAMA

    Auke Visser wrote:>
    > It is simpel but a lot of work remove the t-code from every role!
    I assume that "simpel" has a completely different meaning to the generally accepted meaning of the English word "simple"?
    I dont think it is possible to answer this question in a usefull manner without knowing the transaction code(s)...
    In many cases, removing the transaction code from object S_TCODE (only) is useless (except for stupid end users).
    Relying on the fact that all end users are stupid, can quickly become an occupational hazard for many transactions...
    Depending on the transaction, my recommentation would be to look whether there is an object check upfront in the transaction's underlying coding or a common denominator object which is checked, regardless of how the user accesses the "transaction"... and then restrict those authorization object(s) or remove them entirely if you are sure that the access is not required for what ever reason.
    Some transaction groups have a "base check" function from which you can form an opinion.
    Kind regards,
    Julius

  • Authorization removed but T-code still accesible

    Hello,
    We are on ECC 6.0 / Oracle 10 / Solaris 10...
    I am removing a T-code from a Z role in the system , it is still reflecting to the user...
    I am removing it from the menu completely , but i can see it in object S_TCODE...
    Is this is a bug or i am missing something?
    Thanks,
    R@HuL...

    Hi Rahul,
    Please check the status of the object S_TCODE in the role being mentioned by you.If you have the status of the object as STANDARD then the values have been pulled from the entries in the role menu and if the status is MANUALLY then the values have been entered manually and not through the role menu.
    After removing the concerned transaction from the role menu and generating the profile,please check where the transaction is appearing in the role authorization,it should not appear in the S_TCODE object if it is in STANDARD status.But if the object S_TCODE is in status MANUALLY the transaction might appear there.
    Bidisha

  • How do i remove the restriction code from my iphone 4s? i forgot it

    How do i remove the restriction code from my IPHONE 4S? I have forgotten what it is. PLEASE HELP!!!

    If you lose or forget a restriction passcode, you will need to perform a factory restore to remove it.
    That is what it says here http://support.apple.com/kb/ht4213
    Message was edited by: Ocean20

  • Removal of EAN code / update problem in ECC

    Hi,
    I have a problem regarding EAN codes within MDM. If a material is created within MDM and a EAN code assigned to the material and the records is syndicated to ECC it all works fine.
    Now later we find out that the EAN code is to be removed and left blank. When syndicating this change to ECC the material is not updated.
    It works fine when changing the EAN code but not when removing the EAN code.
    If you do it manually within ECC you get a warning and then the EAN code is removed. I know you also have to mark a main EAN code within the additional data -> Additional EANs and ECC assigns this automatically if you change EAN codes and automatically removes this when removing the EAN code.
    What is needed to syndicate a removal of EAN code to ECC from MDM?
    Kind regards
    Henning

    Forget about this one.

  • I would like to remove the pass code from my iphone icloud account. I hate having to log in every time ti goes to sleep.

    How do I remove the pass code from my iphone icloud account? I hate having to log in every time my phone goes to sleep.

    Welcome to the Apple community.
    settings > general > passcode lock > off.

  • Removing the country code prefix from all contacts in the Address Book

    upgrading my iphone (to os 3.0) added country codes to all of my contacts,
    not noticing this i synced it with my mac, thus adding said preixes to the contacts on my mac as well.
    is there a way (only applescript from what i understand) to remove the country code from all my contacts?
    thanks!

    paste the following into Script Editor
    <pre style="
    font-family: Monaco, 'Courier New', Courier, monospace;
    font-size: 10px;
    margin: 0px;
    padding: 5px;
    border: 1px solid #000000;
    width: 720px;
    color: #000000;
    background-color: #ADD8E6;
    overflow: auto;"
    title="this text can be pasted into the Script Editor">
    tell application "Address Book"
    set mlist to selection
    repeat with per in mlist
    set NP to number of phones of per
    repeat with i from 1 to NP
    set curphone to value of (phone i of per) as text
    if text 1 thru 4 of curphone is "+972" then
    set value of phone i of per to "0" & text 5 thru -1 of curphone
    end if
    end repeat
    end repeat
    save
    end tell</pre>
    select all the contacts you want to be affected in Address Book (you can select them all) and press "run" in script editor.

  • [svn:osmf:] 9850: Removed full screen code since it isn't working properly.

    Revision: 9850
    Author:   [email protected]
    Date:     2009-08-31 13:01:06 -0700 (Mon, 31 Aug 2009)
    Log Message:
    Removed full screen code since it isn't working properly.
    Modified Paths:
        osmf/trunk/apps/samples/framework/DynamicStreamingSample/src/DynamicStreamingSample.mxml

    You have a tool, that doesn't work in a new version of java.
    The tool vendor would be the one to determine whether the tool and/or the new VM has a problem.

  • Removing a company code

    Hi,
    I am going forward and backward in executing the task of removing a company code.
    What is the right sequence to delete a company code from the system .
    Thanks,
    Chitra

    Hi Chitra,
    please refer this link
    Inactivating a company code
    Re: Closing of Company Code

  • Removing TCP hex codes from ascii string

    I have a TCP connection to my VI and I'm using PuTTY to communicate with it. It is a basic terminal with a few commands. On boot my first command is always unrecognized because a few TCP protocol's are sent immediately beforehand:
    FF FB 1F “window size”
    FF FB 20 “terminal speed”
    FF FB 18 “terminal type”
    FF FB 27 “Telnet Environment Option”
    FF FD 01 “echo”
    FF FB 03 “suppress go ahead”
    FF FD 03 “suppress go ahead”
    Each command is always proceeded by a command character "FF". I can remove the entire offending sting without any problem, however what I've been trying to do is remove any hex code following the command character. I have tried a few things with regular expressions without much luck. Any insight on how to solve this challenge would be appreciated!
    Thanks,
    Devin 

    I'm not a regular expression power user, but I'd try something like the code below (right-click on "Search and Replace String" to set the "Regular Expression" option). This code looks for \FF followed by either \F0 through FA, or \FB through \FE followed by any other character, which I think matches the rules in the Telnet protocol as listed here: http://tools.ietf.org/html/rfc854 It replaces any match found with an empty string.

  • How do I remove the pin code

    Hi
    I need to remove the pin code we put on the ipod, so that the insurance people can fix it - please can someone tell us how to do this!
    Thank you
    (untekkie mother here)

    You need to place the iPod in recovery mode and then restore it via iTunes on your computer.  You should restore to factory defaults/new iPod vice from backup since it appears that the iPod will be given to a third party.  For recovery mode see:
    iPhone and iPod touch: Unable to update or restore

Maybe you are looking for

  • 1-to-1 Relationship Between UI and subVI Data Cluster

    Discussion continued from here. In summary: JackDunaway wrote: Yes, I can see clear benefits in implementing this Idea - that is, if your underlying datatype elements have a 1:1 relationship with the UI elements. I will illustrate this point by showi

  • How to transfer history from old hard drive to new computer

    So my motherboard on my old PC died. I therefore pulled the hard-drive from my old computer and patiently waited on my new toy to come in. Problem is, I didn't have a chance to do my weekly synch before my old system crashed. I'd like to get the hist

  • How can i get my raw files to work?

    Hi on my mac i have purchased adobe photoshop elements 12 and am trying to import my raw images from my nikon d610 but it will not work, i checked and my camera is compatible but it says 8.5 minimum raw camera plug in version. how do i make this work

  • How to compare an Object of type class?

    Hi, I got a generic array and want to check which class it contains. Now i tried to use Class c = T[0].getClass();and later if(c instanceof Float){ }but this don't work. So how to compare two instances of Class? Maybe by looking for the name of the c

  • Link of vehicle to SD/MM

    Hi, what's the best way to display the document flow for a particular vehicle? Interested in SD docs like Order/Delivery/Invoice and MM docs like PO/Del/Invoice and FI docs like Invoice/GL Postings etc. right now I'm looking through SE16 and searchin