Is there a way to create a profile with access to the SE38 T code with only display authorization (not create/execute/delete)? I have restricted the field to DISPLAY alone in authorizations data, but still, some programs can be executed. The R/3 version is 4.5B.

> EXPERT RESPONSE
Place an authorization group on every Type 1 program (except Type 1 type-pools) and give end users authority to execute all the programs using an authorization for S_PROGRAM that has actions BTCSUBMIT and VARIANT. Do not grant access for action SUBMIT. The user will be able to submit reports from any transaction that will start the report but not from SE38 or SA38 or from any other path to a code editor including System/Status.
In some versions of SAP, it is possible to submit a report while viewing the code for an include program for the report. You must make sure that this is not possible in your version, and if it is, you must determine the availability of OSS notes to correct the weakness in your version. Later versions of SAP all allow for executing Type 1 code while viewing an include, but they do enforce the authorization check.

I think this will work. Enter the vaules below but don't include the object S_PROGRAM. I don't have time to test it.

S_DEVELOP
Object ABAP/4 Development Workbench
Authorization XXXXXXXXXX
Field Values
Activity
03
Development class for transport system
$*, T*, Y*, Z*
Node name
*
Development object ID
FUGR, PROG
Authorization group ABAP/4 program
' '

Symptom

You can execute a report in transaction SE38 or SE80 in the standard system if you have display or change authorization and if the report is not assigned to any authorization group.

Reason and Prerequisites

The SUBMIT authorization for the S_PROGRAM authorization object is only checked if an authorization group was assigned to the report.

Solution

You can make the authorization check stricter with the modification of the EXTENDED_AUTH_CHECK_FOR_REPS function module delivered with this note.

А можно написать свою программу для просмотра программ, сделать для нее транзакцию и дать полномочия только на эту транзакцию.

Озадачился и написал
Программа для просмотра текста программ