Question:
Hi,
Can any body tell how can i remove a particular TCode from the SAP_ALL profile .
Thanxs in advance
Answer:
wrong forum, moved to the SAP Security forum.
_________________
SapFans Moderator
NetWeaver ‘04–SAP Web AS for ORACLE certified
Search: /forums/search.php
SAP Notes: http://service.sap.com/notes
SAP Help: http://help.sap.com
Basic Rules: /forums/viewtopic.php?t=222759
Answer:
You can't/don't.
SAP_ALL is supplied by SAP and should not be changed.
Auth object S_Tcode in this profile has value * so even if you copied SAP_ALL you would need to remove the * and then add all the Tcodes except for the one you don't want.
This would be an inefficient use of your time and wouldn't protect much because you'd still have all the other auth objects with * values in the profile.
_________________
Sandi
~~~~
Apparently Father Christmas, the Easter Bunny, the Tooth Fairy and Star Wars aren't real
Tuly kiwi.
Answer:
There is actually nothing wrong with copying sap_all and then make your own changes. You can input ranges for s_tcode, so you do not have to list all tcodes.
But when that is said and done. I am personally against assigning that wide of a profile. And furthermore it seems a bit over the top to go to such length in order to remove one tcode, and most likely the user can still perform the same functionality by other means, if you just remove the tcode.
Answer:
Lock the transaction?