Authorizations in the CTS

This section is intended for customers with longer experience of the SAP System. If you have just installed the system, use the role maintenance transaction to maintain authorizations.

If you want to set up your own authorizations, bear in mind that in addition to the CTS authorizations, users also require the following authorizations to work with the extended view of the Transport Organizer:

  • S_DATASET_AL (for accessing files)
  • S_C_FUNCT_AL (for calling external programs)
  • S_TCD_ALL (for calling transactions)

Since Release 4.0, the administration functions in the CTO have been safeguarded by a new authorization object called S_CTS_ADMI. The authorization object S_TRANSPRT introduced in 3.0 is now used exclusively to safeguard functions that directly change requests and tasks.

The authorizations are checked independently of the user name. User DDIC therefore does not automatically have administration rights. A user who wants to schedule the transport program (RDDIMPDP) needs administration authorization so that the program can run without errors.

The authorization object S_TRANSPRT consists of the fields Activity and Request type. The following values are used:

Activity

Description

01

Add or generate

02

Change

03

Display

05

Lock

06

Delete

23

Change/edit object list manually

43

Release

50

Change source client

60

Transport

65

Merge request

75

Release other user's requests

78

Edit transport proposal

90

Change owner

Request types

Description

CLCP

Client transports

CUST

Customizing requests

DLOC

Local change requests

DTRA

Transportable change requests

MOVE

Relocation transports

PATC

Support Packages

PIEC

Piece list

TASK

Task (repair or correction)

TRAN

Transports of copies

The authorization object S_CTS_ADMI, with safeguards administration functions, only has the field CTS_ADMFCT, whose values describe the various administration activities. Use the following values to assign the user authorization for particular administration functions.

Administration function

Description

TABL

Maintain the control tables of the Transport Organizer (for example, configure the transport routes)

  • Schedule the transport dispatcher RDDIMPDP
  • Call certain administration tools (Transaction SE03)
  • Extended maintenance authorization when changing the object directory entries with the tool Change Object Directory Entries of Objects (Transaction SE03).

INIT

Initialize the Transport Organizer, for example, after a system copy

SYSC

Setting the System Change Option

PROJ

Manage projects in the Change and Transport System

INBX

Edit the TMS worklist

QTEA

Approve transports into the production system

IMPA

Import all requests in an import queue

IMPS

Import individual requests into the target system

TADM

Special transport functions in TMS

TDEL

Delete transport requests from the import queue

TADD

Forward transport requests to an import queue

TQAS

Activate or delete inactive transport requests

IMPT

Import requests into the target system using the Transport Management System (obsolete)

EPS1

Generate EPS objects

EPS2

Change EPS objects

No comments: