Question:
BW 2.1c
Trying to remove Transaction codes from a role. Have deleted them from the menu, this has also removed them from list of S_TCODE under authorizations.
However users are still able to access the transaction.
What am I missing?
Thanks
_________________
life only sucks when you let it get that way!
Answer:
that probably means the buffers have not been refreshed... had the same problem in our R/3 environment...
there is a transaction code to do it... I believe it's $SYNC (check with your basis people for possible consequences of this transaction)
cheers,
El Belgio
Answer:
Thats the one cheers. solved the problem many thanks.
_________________
life only sucks when you let it get that way!
Answer:
Not a good idea to run $SYNC in production in most cases. I would bet that there was a better solution to getting tables synchronized as it relates to security issues. A function module such as SUSR_USER_TABLES with parameter tabletype = X or something.
$SYNC can cause your system to start over with cached data and can take a very long time for the system to come back to the performance level it was at before you ran $SYNC. You can also cause certain work processes to fail for users and cause some very unhappy customers. The potential is that you will cause far more problems by running $SYNC than you fixed with the security problem you were experiencing, if that even works. I would block any user but your basis admins from running $SYNC and if they do not understand the possible problems using it, block it from them too.
_________________
Gary Morris
SAP Security Analyst/Developer
garymorris@sapsecurity.net
Answer:
Thx for explaining! (that's what I was referring to...
check with your basis people for possible consequences of this transaction
El Belgio