Authorizations in the CTS

This section is intended for customers with longer experience of the SAP System. If you have just installed the system, use the role maintenance transaction to maintain authorizations.

If you want to set up your own authorizations, bear in mind that in addition to the CTS authorizations, users also require the following authorizations to work with the extended view of the Transport Organizer:

• S_DATASET_AL (for accessing files)
• S_C_FUNCT_AL (for calling external programs)
• S_TCD_ALL (for calling transactions)

Since Release 4.0, the administration functions in the CTO have been safeguarded by a new authorization object called S_CTS_ADMI. The authorization object S_TRANSPRT introduced in 3.0 is now used exclusively to safeguard functions that directly change requests and tasks.

The authorizations are checked independently of the user name. User DDIC therefore does not automatically have administration rights. A user who wants to schedule the transport program (RDDIMPDP) needs administration authorization so that the program can run without errors.

The authorization object S_TRANSPRT consists of the fields Activity and Request type. The following values are used:

Activity	Description
01	Add or generate
02	Change
03	Display
05	Lock
06	Delete
23	Change/edit object list manually
43	Release
50	Change source client
60	Transport
65	Merge request
75	Release other user's requests
78	Edit transport proposal
90	Change owner

Request types	Description
CLCP	Client transports
CUST	Customizing requests
DLOC	Local change requests
DTRA	Transportable change requests
MOVE	Relocation transports
PATC	Support Packages
PIEC	Piece list
TASK	Task (repair or correction)
TRAN	Transports of copies

The authorization object S_CTS_ADMI, with safeguards administration functions, only has the field CTS_ADMFCT, whose values describe the various administration activities. Use the following values to assign the user authorization for particular administration functions.

Administration function	Description
TABL	Maintain the control tables of the Transport Organizer (for example, configure the transport routes) Schedule the transport dispatcher RDDIMPDP Call certain administration tools (Transaction SE03) Extended maintenance authorization when changing the object directory entries with the tool Change Object Directory Entries of Objects (Transaction SE03).
INIT	Initialize the Transport Organizer, for example, after a system copy
SYSC	Setting the System Change Option
PROJ	Manage projects in the Change and Transport System
INBX	Edit the TMS worklist
QTEA	Approve transports into the production system
IMPA	Import all requests in an import queue
IMPS	Import individual requests into the target system
TADM	Special transport functions in TMS
TDEL	Delete transport requests from the import queue
TADD	Forward transport requests to an import queue
TQAS	Activate or delete inactive transport requests
IMPT	Import requests into the target system using the Transport Management System (obsolete)
EPS1	Generate EPS objects
EPS2	Change EPS objects