Profile and Roles

Question: I am a basis person and know little less on Security. I would appreciate if you could help me out in resolving this issue.

Question: There is an object "M_BEST_EKO" for which user needs authorization. In SUIM, I found that object is there in profile M_ALL and assigned that profile to the user.

IN SUIM, under transactions by profile, If I enter M_ALL, I get Zero in result which means that the authorization does not have any execuatble transacation.

Is this possible to have object in profile but no Transactions can be executed using that profile????

I have a role too which has the object, so which one should I use role or profile?

Thanks

Answer:
i think those 'old' composite profiles are meant to be an addition to a manually assigned object S_TCODE. It's not executable of itself.

always use roles when the choice is there. they are transparent, state of the art and can be transported and ...
_________________
rgds
fish
Copyright ?2007 - 2008 www.jt77.com