block user for call some program

Question: Hi all,

I'm a new SAP Security.
I don't know about authorization objects or authorization group.
I'm ABAPER.

I have problem about block user to call transaction code SU01 or call Program SAPMSUU0.

SU01 refer to program SAPMSUU0.(SE93)

Transactioncode SU01 have tab profile.

I want to protect profile in SU01.(user can change his profile to SAP_ALL)

I block user that user can't access to transaction code SU01,

but user can go to transaction SE38 and Call program SAPMSUU0.

user still can run this program.

How can I protect user to call this program?

(I can't block transaction code SE38 SA38 )

Thanks in advance

Answer:
I don't know about authorization objects or authorization group.



I don't think if makes sense to help somebody further if he really doesn't know what he is doing.... And certainly in the area of authorisations.

Better have a look at the 'authorisations made easy' documents that you can find by using Google or the Search functionality of this forum.

Didier
_________________
PM/CS FAQ
PM/Sapfans SEARCH
help.sap.com

Answer:
You were an ABAPer...

Remove S_USER_PRO from the access of the user and ask your question in the ABAP forum for further infos.

Tarr
Copyright ?2007 - 2008 www.jt77.com