Re: Branchs controls by user
Hello Julius, changing SU22 was only a test and I've undone them. About your question regarding 'loading': no. We just need the user's parameter value to be used instead of memory values from previous...
View ArticleRe: Cannot specify an imparting role
Hi JuliusThe major downside of derived roles is that the will all be exactly the same, except for technically defined org level fields.Quite amusing - as I would normally say the "The major positive of...
View ArticleRe: Cannot specify an imparting role
You can provision a role with anything via SU24 and then do a merge to all roles who are affected. That can be automated to a one-click per role level. Yes, we have our own tools to sync the menus and...
View ArticleClik here to view.
Re: Cannot specify an imparting role
Thanks Julius. I'll key an eye out for the APIs and SAP Note Agree, the benefits of derived roles may not longer be there. Though I do wonder how many people out there adopt the improvements and...
View ArticleRe: Cannot specify an imparting role
Dear Colleen and Julius I don't have my own tool which will make the life easier to develop or maintain the roles. The business logic as same as company 1, vendor group/account group except the...
View ArticleSNC communication between servers
Hi, guys We've already installed a 3rd party Identity Management software. Our target is to distribute a productive password from IdM software to satellite environments. According to SAP Note "1287410...
View ArticleRe: SNC communication between servers
You need to use a Kerberos SNC library on the server running IdM software, so I don't recommend using the SAP Cryptolib as this only supports use of x.509 certificates for server to server connections....
View ArticleMass Lock and Unlock Users
the 2 TCodes for locking and unlocking users are SU10 and EWZ5.Can we set a condition by date and time to be locked and unlocked automatically ??
View ArticleRe: Mass Lock and Unlock Users
Hi this can be done by customised abap programs based on user group but this is highly not recomended as mass user lock/unlock is sensative job wherein care has to be taken so done manually.
View ArticleRe: How to manage authorization technic in case that user uses other company...
Hi Lakshmipathi as per the situation i undestand user need authorisation of both A & B for PO Create,change and display.If SOD permits we can create a role permiting both the company codes orselse...
View ArticleRe: Mass Lock and Unlock Users
i just need to lock all the dialog users by 11:30 pm at 31-12-2014 so the finance Dep. can do the year closer and unlock every one again by 3:00 am 1-1-2015 automatically . i don't know if there is a...
View ArticleCATS configuration: Authorization just on Receiver Orders without using...
Hey,we use the time sheets in CAT2 and in PA30 the administrator-time of every user (field name SACHZ) is his superior. So in CATS_DA the superior can see all data of his employees and no data of any...
View ArticleRe: Mass Lock and Unlock Users
Hello Fady, Take the Help of ABAPer to get a custom program written....Since there is little time I guess u need to do it manually using SU10 or EWZ5 and if that's the case HAPPY NEW YEAR in ur ofc....
View ArticleRe: How to provide controled sm30 access to a field in a customised table??
Hi All, By using S_TABU_LIN and S_TABU_NAME, I am able to restrict SM30 access to a particular row in a table. ThanksHari Duggineni
View ArticleSAP HelpDesk - Should they have access to priv t-codes such as PFCG, SU01?...
Under what circumstances can SAP Helpdesk users have access to PFCG and S_USER_SAS for update activity codes? What about SU01 and S_USER_SAS? Can this pose a security risk? I am new to SAP auditing and...
View ArticleNW74 authority check on call transaction
Hello,On NW74, ABAP help mentions that usage of CALL TRANSACTION statement without the new additions WITH AUTHORITY-CHECK or WITHOUT AUTHORITY-CHECK is obsolete; And among other things, these additions...
View ArticleRe: NW74 authority check on call transaction
:-) CALL TRANSACTION has always checked S_TCODE, it is just that the sy-subrc was set to 0 regardless of authorizations. SE97 gives you an option of coupling exceptions based on the calling transaction...
View ArticleRe: NW74 authority check on call transaction
Thanks Julius for clarifying, I should have tested the statement first and it does work without the additions clause and I believe its introduced to enable secure development. But I am lost why...
View ArticleRe: NW74 authority check on call transaction
There are 2 checks in the kernel when you call a transaction -> the S_TCODE and the additional check in SE93 (table TSTCA). Sometimes this contains the S_TCODE as well (from days before the start...
View ArticleRe: NW74 authority check on call transaction
I proceeded to test and find on my own, and I must agree with what you wrote. Denying a test user any authorizations on the called transaction only granting the calling transaction, after running a...
View Article