Question:
I applied the instructions suggested by John (copied below) and I can't see any result; I have a question now before going ahead: does this modification affect the cleaning of duplicate transactions in user menus or even work with the elimination of duplicate folders? This last one is actualy my purpouse.
Second question: I am trying to begin to manage the security in my business using PPOMW and the best way is to leave apart collective roles (used in 4.6C) and work just with individual roles. If I decide to let my users work just with Sap standard menu (deactivating user menus)and managing the authorizations through PPOMW and PFCG, where do I place the custom transactions I want to assign to single users?
Code:
FUNCTION Z_SEC_ASSIGN_AG_CLEANUP_SINGLE.
*"----------------------------------------------------------------------
*"*"Local interface:
*" IMPORTING
*" REFERENCE(ACTIVITY_GROUP) LIKE AGR_DEFINE-AGR_NAME
*"----------------------------------------------------------------------
tables agr_users.
delete from agr_users where agr_name = ACTIVITY_GROUP and
to_dat LT sy-datum.
ENDFUNCTION.
and
Code:
FUNCTION Z_SEC_ASSIGN_AG_CLEANUP.
*"----------------------------------------------------------------------
*"*"Local interface:
*" TABLES
*" ACTIVITY_GROUPS STRUCTURE STR_AGRS
*"----------------------------------------------------------------------
field-symbols: <fbname> like usr02-bname.
delete ACTIVITY_GROUPS where to_dat lt sy-datum.
assign ('(SAPLSUU4)G_USER_AGR_ACTIVITYGR-BNAME') to <fbname>.
if sy-subrc = 0.
delete from agr_users where uname = <fbname> and
to_dat lt sy-datum.
endif.
ENDFUNCTION.
You configure the call in SSM_CUST entry
Z_USERS_TRANSFER = FUNCTION Z_SEC_ASSIGN_AG_CLEANUP
and
Z_SINGLE_USERPROF = Z_SEC_ASSIGN_AG_CLEANUP_SINGLE
Z_EXIT_USERS_SAVE = Z_SEC_ASSIGN_AG_CLEANUP_SINGLE
Answer:
Second question: I am trying to begin to manage the security in my business using PPOMW and the best way is to leave apart collective roles (used in 4.6C) and work just with individual roles. If I decide to let my users work just with Sap standard menu (deactivating user menus)and managing the authorizations through PPOMW and PFCG, where do I place the custom transactions I want to assign to single users?
Stick them in an appropriate place in the standard menu (transaction SE43 area menu S000 - SAP R/3 System)
I have found it makes it easier for admins and users if custom end user transactions are incorporated into the standard menu as part of the development activity.
Answer:
Never used transaction SE43; I'll try and see how it works.
Thanks again.
Max
Answer:
You don't - that is the purpose of using the standard menu and adding the transactions to that.
There is no harm in users being able to see the extra transactions as long as they can't execute them.
If you really want to have a single menu for a user (not forgetting they can switch between menu's unless the functionality is turned off) you can do this in the "defaults" tab of SU01 in field StartMenu by entering the area menu.
Answer:
Ok perfect... now I've got it.
Problem is that I want to work just with Sap standard menu for my users and turn off the chance to switch to user menu.
So if I select a menu area as Start menu in SU01 for a user ... the Sap standard S000 just goes off ...
Anyway ... I'll try to think to a solution ...
Thanks again for your help.
Max
Answer:
Table SSM_CUST can have an entry to turn OFF user menus so only the SAP menu can be used. This site has a listing of the falues and in the higher versions of SAP SAP preloads some of the values into the table you just have to turn it on or off. You can also look in SE11( or SE12) on a where used on SSM_CUST and expand all the results to find all the values SAP checks.
Answer:
Thanks John for the quick reply (as usual); I'll have a try and see what happen.
Ciao.
Max