Question:
Hello, I want to disable access to AL11 to some users to see only some directories, not all the directories that show the AL11 tcode.
How can I do it?
For example: I want user A to see only dir_trans in AL11 and user B to see only dir_trans and dir_exe.
Best regards,
Iņigo
Answer:
Have you tried running a trace using ST01 to see which authorisation objects are being checked in transaction AL11?
Mary.
Answer:
Mary, I did it but nothing interesting came out.
What I mean is that I donīt want some users to see all the directories in AL11 and I canīt find a profile or authorization to do that, to avoid that access.
I run tcode FILE to add a new directory and then tried to delete some of the other directories but I couldnīt. I donīt know if the solution is in this tcode FILE, but how?
Iņigo
Answer:
As SAP supplies it. AL11 will allow users to navigate the file system - AL11 is typically not an "end user" transaction so SAP have not tied it down.
(to access it you will need S_TCODE AL11 + S_ADMI_FCD vale STOR).
However to do anything with the files on the server (i.e. do any more than view the filenames) users will also need access to S_DATASET PROGRAM RSWATCH0 and access to the specific files/folder - you can restrict using this. You must also specify the activities the users can carry out.
To summarise if you give users AL11 (without customisation) they can view all the folders & files but can only perform actions (i.e. display, delete) on the files that you specify.
Answer:
How can I do that? In AL11, when I go to configure buttom, I can only add new paths but no restrict the others. So how can I restrict access to the other directories for users not to see these directories? Developing a new program? by customizing? and in this case, how?
Best regards,
Iņigo
Answer:
You cannot.
As the earlier not indicates the transactionis not designed for General users it is for Basis. You cannot restrict what directories the transaction code shows. you can restrict what a user can do tot he files.
Answer:
Hi,
I just have a question :
How could you delete a file at the unix level via transaction AL11 ?
I have sap_all profile but i couldn't.
Thank you very much
Regards.