Question:
Hi Gurus
we are having a problem , for the New Trainees and joinees in SAP ,we have created a profile with selected T-codes of their areas of specialisation apart from it we also wanted to give the display rights of IMG to all
Presently we have to select each object one by one and give display rights
Can u pls tell us what is the specified role or profile we have to choose or any other easy way which can solve the problem
Regards
Umang
Answer:
Why posting this in the Basis forum?
Answer:
moved out of Basis forum.
_________________
SapFans Moderator
NetWeaver ‘04–SAP Web AS for ORACLE certified
Search: /forums/search.php
SAP Notes: http://service.sap.com/notes
SAP Help: http://help.sap.com
Basic Rules: /forums/viewtopic.php?t=222759
Answer:
OCT 12 2006...
We are on release 4.6C. With regards to an IMG Display ALL enquiry.
In our case when a test ROLE was created from the IMG Project. Some 24800+ TCD's were pulled in. This number may vary from customer to customer.
Note: objects that are pulled into the ROLE have to be edited ie: ( ACTVT = 03 )
Also another little gem that support provided was a report program called:
ZWLISTOFTCODE.
This report lists all the TCD's used by SPRO.
You may ask for it from SAP, as it may vary from one release to another.
Note the reference in the program for table: CUS_ACTOBJ to extract
the TCD's
-------- Begin of ABAP Code for Report ZWLISTOFTCODE --------
REPORT ZIMG_GET_TCODES.
data lt_cus_actobj type table of cus_actobj.
data table_lines type sy-tabix.
data wa like line of lt_cus_actobj.
select * from cus_actobj into table lt_cus_actobj.
sort lt_cus_actobj by tcode.
delete adjacent duplicates from lt_cus_actobj comparing tcode.
describe table lt_cus_actobj lines table_lines.
write: 'Number of transactions called from IMG :', table_lines.
skip.
loop at lt_cus_actobj into wa.
write wa-tcode.
new-line.
endloop.
-------- End of ABAP Code for Report ZWLISTOFTCODE --------
When the report ran it listed 5542 tcodes used by SPRO.
So a question on the 28000+ from the IMG Project vs 5542 from the report now exists. Why such a diference?
It was also found during the ROLE creation while entering the TCDs
in the menu, that a small amount of TCD's listed in the report did not
exist.
(There were no duplicate TCDs in the report or in the test ROLE
that was created from the IMG Project)
For what its worth here is the document(s) from Support.
-------- Begin of Support Document --------
There exist no possibility to restrict the access to the reference
IMG within SAP-standard, every user has access to the reference IMG.
But maintaining the data within IMG is restricted as follows:
The best and only rationally solution is, to control the authority
checks over the project-IMG.
If you have created an project-img, you can create authority checks
automatically within transaction PFCG.
to do:
start transaction 'PFCG'
select a role
navigate to tab title 'Menu'
navigate over the menu 'Utilities' -> 'Customizing auth.'
add one ore more IMG projects
please also read the following SAP-note:
46546 This is a note on Object S_IMG_ACTV
-------- Begin of OSS Note --------
Note 46546 - Display authorization for activities in IMG
Note Language: English Version: 4 Validity: valid since 28.09.2004
Summary
Symptom
A user should only have the authorization in Customizing to display the available settings. The user should not have any authorization to edit the settings. The authorization object S_IMG_ACTV should be used for this authorization assignment.
Other terms
Transaction SPRO, Customizing
Reason and Prerequisites
The S_IMG_ACTV authorization object that is available up to and including Release 4.5 cannot be used to control this authorization. It is only used at this point to allow or not to allow maintenance.
Solution
Use the S_TABU_DIS and S_TABU_CLI authorization objects to assign the relevant authorization to the user.
If you have created an IMG project, you can use transaction PFCG to create a suitable authorization for this IMG project. In transaction PFCG, you have the option of assigning one or several IMG projects. The corresponding authorization profiles are then transferred and can be defined as required. Create a new role for this in transaction PFCG. If you are processing the role, you can use the menu "Utilities -> Customizing authorizations" to assign the relevant IMG project and/or project views to the role. The role is then adjusted according to this selection.
Up to and including Release 4.5:Theuser is given the authorization S_IMG_ACTV additionally. The user can then start the corresponding setting transaction from IMG.
-------- End of OSS Note --------
Please read the documentation of the authority objects
You can reach the documentation as follows:
within change role: Authorizations navigate over the menu
Utilities -> Technical names on
Double click the authority object
The object S_IMG_ACTV (activity 02)
together with S_TABU_DIS (activity 03)
should work for you to create a display only role for example
Further details you can find in our authorization made easy - guide
( 6-38 ) .
-------- End of Support Document --------
I hope, that this information will help you to solve the issue.
_________________
Br.
S. Kirkey
Answer:
cus_actobj is only one of the tables that house tcodes for the IMG,as I recall there are three. If you try and include all the tcodes in the IMG into a role PFCG gets into an endless look as the authorizations for S_TCODE exceed 99 and it keeps trying to fill the authorizations. There are over 35000 tcodes as I recall.
THere is a post here that gives you code you can use to load a role with the base tcodes and then add "S_ALR*" . Problem is You will end up with a lot of tcodes you will have to find the display version for and change the tcode. Note the activity fields are more than ACTVT.
_________________
John A. Jarboe