Question:
Hi everyone,
Maybe you can help me with this. Currently our system lets everyone release everyone's transport order. This mean I can realese my buddy transport order.
Is there a way to restrict displaying and realesing transport orders per user? Which auth. object do I need to add?
Cheers, Tato.
Answer:
Look at the documentation on S_TRANPRT.
also run a ST01 authorization trace on transation SE10 the release process so you can see what the different activities do. In order to release another's transport SAP, with the proper access requires you to "change owner" which you can control. But the release of a transport is not the contorl concern, it means nothing until you IMPORT the transport. This activity you CAN control and should limit it to 1 or 2 basis people.
Answer:
you might have assigned a default role for all users , if so make S_TRANSPRT object inactive for the role which is assigned to most of the users and create 2 new roles 1.Zxxx_TPT_CREATE and 2.Zxxx_TPT_RELEASE , first role you set the activity as 01,02,03 and Aut Group as * - so users who are assigned to this role can create transport requests but not relase requests. 2.in Zxxx_TPT_Release set the activity to all other than 'import' and AUT grp as * , and assign this role to only users whom you want to allow to transport , i am talking at transport request level , you can also do restrict users at task level too , look for documentation for S_Transprt object , hope this helps
Answer:
Note Roles are master data and do not have to start with 'Z' or 'Y' , do not waiste you letters.
Answer:
I appreciate your help. I will try your suggestions