Hi Hima Bindu
Remove the role which has SU3 tcode from all the users and assign that role to the users who should change Time Zone, decimal Notation, Parameters additiond by them self then , as per your requirement, which I am not happy about it any way.
For all the others users, security team will look in to it
I am not considering to go to ABAP er for creating of custom tcode for Su3 ..
SU3 is basically for change and SU01d is basically for display
Howzz thaaat ??
Cheers
Pavan M