RESOLVED: S_TCODE - present in every single role?

[chris55]

SAP Security is a long way from being my specialist area so maybe someone could answer this simple question (can't find an answer in SAP Help or anywhere else). Is the cross application authorisation objects class, and therefore the S_TCODE object, present in ALL single roles by default?

Also, is there a good internet-based source for information on role design and the like? Again, I haven't managed to find one (I don't include SAP Help in this).

Thanks,
Chris.

[henrik]

Hi Chris,
S_TCODE gives access to start a transaction code, so yes, you would find the object in most roles. There might be some exceptions for system type roles. But no, it is not included by default in all roles. The object classes are just groupings. They have no actual technical function for the security concept.

"Authorisations made easy" can be found on the internet I think. It would be an older version, such as 4.6C, but the basic concept hasn't changed. So if you understand what that book says, you are off to a good start.

There are heaps of resources available for free, such as this forum. But do yourself the favor of thinking and researching before asking the questions when they come up - and they will! People here are always happy to help, especially if you have made an effort yourself...

Best of luck.
Henrik

[chris55]

Hi Henrick,
Many thanks for your advice. I'll try and find "Authorisations made easy".
Regards,
Chris.