Authorizations in the CTS (SAP Library - Change and Transport System)

Authorizations in the CTS

Note

This section is intended for customers with longer experience of the SAP System. If you have just installed the system, use the role maintenance transaction to maintain authorizations.

If you want to set up your own authorizations, bear in mind that in addition to the CTS authorizations, users also require the following authorizations to work with the extended view of the Transport Organizer:

S_DATASET_AL (for accessing files)
S_C_FUNCT_AL (for calling external programs)
S_TCD_ALL (for calling transactions)

Since Release 4.0, the administration functions in the CTO have been safeguarded by a new authorization object called S_CTS_ADMI. The authorization object S_TRANSPRT introduced in 3.0 is now used exclusively to safeguard functions that directly change requests and tasks.

Note

The authorizations are checked independently of the user name. User DDIC therefore does not automatically have administration rights. A user who wants to schedule the transport program (RDDIMPDP) needs administration authorization so that the program can run without errors.

The authorization object S_TRANSPRT consists of the fields Activity and Request type. The following values are used:

Activity

Description

01

Add or generate

02

Change

03

Display

05

Lock

06

Delete

23

Change/edit object list manually

43

Release

50

Change source client

60

Transport

65

Merge request

75

Release other user's requests

78

Edit transport proposal

90

Change owner

Request types

Description

CLCP

Client transports

CUST

Customizing requests

DLOC

Local change requests

DTRA

Transportable change requests

MOVE

Relocation transports

PATC

Support Packages

PIEC

Piece list

TASK

Task (repair or correction)

TRAN

Transports of copies

The authorization object S_CTS_ADMI, with safeguards administration functions, only has the field CTS_ADMFCT, whose values describe the various administration activities. Use the following values to assign the user authorization for particular administration functions.

Administration function

Description

TABL

Maintain the control tables of the Transport Organizer (for example, configure the transport routes)
Schedule the transport dispatcher RDDIMPDP

Call certain administration tools (Transaction SE03)

Extended maintenance authorization when changing the object directory entries with the tool Change Object Directory Entries of Objects (Transaction SE03).

INIT

Initialize the Transport Organizer, for example, after a system copy

SYSC

Setting the System Change Option

PROJ

Manage projects in the Change and Transport System

INBX

Edit the TMS worklist

QTEA

Approve transports into the production system

IMPA

Import all requests in an import queue

IMPS

Import individual requests into the target system

TADM

Special transport functions in TMS

TDEL

Delete transport requests from the import queue

TADD

Forward transport requests to an import queue

TQAS

Activate or delete inactive transport requests

IMPT

Import requests into the target system using the Transport Management System (obsolete)

EPS1

Generate EPS objects

EPS2

Change EPS objects

Activity	Description
01	Add or generate
02	Change
03	Display
05	Lock
06	Delete
23	Change/edit object list manually
43	Release
50	Change source client
60	Transport
65	Merge request
75	Release other user's requests
78	Edit transport proposal
90	Change owner

Request types	Description
CLCP	Client transports
CUST	Customizing requests
DLOC	Local change requests
DTRA	Transportable change requests
MOVE	Relocation transports
PATC	Support Packages
PIEC	Piece list
TASK	Task (repair or correction)
TRAN	Transports of copies

Administration function	Description
TABL	Maintain the control tables of the Transport Organizer (for example, configure the transport routes) Schedule the transport dispatcher RDDIMPDP Call certain administration tools (Transaction SE03) Extended maintenance authorization when changing the object directory entries with the tool Change Object Directory Entries of Objects (Transaction SE03).
INIT	Initialize the Transport Organizer, for example, after a system copy
SYSC	Setting the System Change Option
PROJ	Manage projects in the Change and Transport System
INBX	Edit the TMS worklist
QTEA	Approve transports into the production system
IMPA	Import all requests in an import queue
IMPS	Import individual requests into the target system
TADM	Special transport functions in TMS
TDEL	Delete transport requests from the import queue
TADD	Forward transport requests to an import queue
TQAS	Activate or delete inactive transport requests
IMPT	Import requests into the target system using the Transport Management System (obsolete)
EPS1	Generate EPS objects
EPS2	Change EPS objects