I have a sort of Best Practice question about the S_RFCACL object.
As all our authorisation roles are created in Development and then transported across Quality to Production, the object S_RFCACL, which is needed for our users, is maintained also with the relevant Development, Quality and Production system IDs in the field RFC_SYSID.
This field contains the source Development, Quality and Production system IDs to enable the trusted RFC for our users in each of these systems.
I would like to have the source Production system ID in S_RFCACL ONLY in the target Production system, similarly for the source Quality and source Development system. So that trusted RFC connections are definitely only possible from source Production system to target Production system.
This would mean that S_RFCACL would have to maintained directly in each of the target systems, instead of transporting it.
How do you handle this object, this field RFC_SYSID in particular?