Re: Why not activate S_RFCACL in SAP_ALL? (no, really!)

ps: As such changes to default behaviour (particularly if they are heading in the direction of less secure) are likely to be classed as a development request, perhaps a better bet for you is to launch your thoughts via ASUG?

Opening an OSS note will with little doubt lead you to SAP Note # 11.

Another option is the SCN Security Functionality Wishlist -> Security Functionality Wishlist-Topics - Security and Identity Management - SCN Wiki  - it has a good hit rate if the idea is well thought out, which in this case I have my doubts about.

You are welcome to refer to this discussion in all 3 which promises to continue to be lively, up to you. But I have some doubts that in this case community motivation will have much impact, even with the "We are customer" slogan from one auditor and references to other frustrations you have added... :-) (I did not comment on them as they are irrelevant to this discussion - but feel free to open threads about them as well - also interesting stuff and backgrounds to it, but I do also understand your frustrations with some of them combined with old habits - I am well versed in that, but that is just me).

Cheers,

Julius