Question:
HI FANS
when I put a trace using ST01 and run RSA3 fully I get on the trace
S_DEVELOP with values of 02 (change) for activity and
PROG for object type. We all now these values are
the forbidden fruit in production system.
How to avoid this in production.
thanks
guest77
Answer:
Just because the trace showed a check against S_DEVELOP, does not mean that the user will need it for RSA3.
Try running the transaction (as intended to be used) with a user without S_DEVELOP?
Tarr
Answer:
hi tarr , do you mean make s_develop inactive? and run trace to see if any other objects are hitting?
Answer:
make a testuser without s_develop and have a try ... sometimes auths we're checked that aren't needed for the normal work.... another example is S_ALV_LAYO for the global layout - often checked but you don't need it to work....
Answer:
Yes. Get the user to run the extraction when they do not have S_DEVELOP auths at all - and see whether there is a difference.
You can also set a watch-point in the include for the function which is auth checking S_DEVELOP (????*SAPI) and use RSA3 and see when it is reached.
Tarr