Authorization Objects in the CTS (SAP Library - Change and Transport System)

Authorization Objects in the CTS

The following authorization objects exist in the CTS:

● S_TRANSPRT

To secure functions that change requests and tasks.

● S_CTS_ADMI

To secure the administration functions of the CTS.

Use the role maintenance transaction to maintain authorizations.

If you want to set up your own authorizations, use the authorization trace. For more information, see Analyzing the Authorization Checks.

S_TRANSPRT

The authorization object S_TRANSPRT consists of the fields Activity and Request type. The following values are used:

Activity	Description
01	Add or generate
02	Change
03	Display
05	Lock
06	Delete
23	Change/edit object list manually
43	Release
50	Change source client This is only possible, if the request does not contain any client-dependent objects.
60	Transport
65	Reorganize requests/tasks
75	Release other users’ requests
78	Edit transport proposal
87	Assign own request to another user
90	Change owner

Request types	Description
CLCP	Client transports
CUST	Customizing requests
DTRA	Transportable change requests
MOVE	Relocation transports
PATC	Support Packages
PIEC	Piece list
TASK	Task (repair or correction)
TRAN	Transports of copies

S_CTS_ADMI

The authorization object S_CTS_ADMI, which safeguards administration functions, only has the field CTS_ADMFCT, whose values describe the various administration activities. Use the following values to assign the user authorization for particular administration functions.

Administration function	Description
TABL	Change the global configuration of the Transport Organizer ● Change the TMS configuration ● Schedule the transport dispatcher RDDIMPDP ● Call certain tools only for administrators (transaction SE03) ● Enhanced maintenance authorization when changing object directory entries using the tool Change Object Directory Entries (transaction SE03)
INIT	Initialize the Transport Organizer, for example, after a system copy
SYSC	Setting the System Change Option
PROJ	Manage projects in the Change and Transport System
INBX	Edit the TMS worklist
QTEA	Approve transports into the production system
IMPA	Import all requests in an import queue
IMPS	Import individual requests into the target system (obsolete)
IMPT	Import requests into the target system using the Transport Management System (obsolete)
TDEL	Delete transport requests from the import queue
TADD	Forward transport requests to an import queue
EPS1	Transfer files using the Electronic Parcel Service to any directories (EPS)
EPSW	Write files to the transport directory using the Electronic Parcel Service. This is a subright of EPS1.
EPS2	Manage files in the Electronic Parcel Service (EPS)
QTEA	Edit QA approval step and distribute approved requests
TQAS	Activate inactive requests. This can, for example, override a QA approval.
TADM	Special transport functions in the TMS, such as QA approval.