Quantcast
Channel: SCN: Message List - Security
Browsing all 5338 articles
Browse latest View live

Re: How to switch a whole SAP system to be Display ONLY

Yes, your could exclude some tcodes and also add other values and fields which have an activity type of control but are not ACTVT. Which ones do your suggest? ;-)  Cheers,Julius

View Article


Re: Not able to generate profile in PFCG

Actually in higher releases, once you have run step 1 the option is greyed out - for this very reason. Cheers,Julius

View Article


Re: How to switch a whole SAP system to be Display ONLY

I choose creating new role from sap_all. Because of there aren't more time to change all roles (+1000). And no more people to test new roles. Also if you can not change some tcodes authorizations you...

View Article

Re: How to switch a whole SAP system to be Display ONLY

Hi O.K I had mentioned do not create a SAP All display up in my comments. Julius is correct - you will have a bunch of people either roll their eyes and dismiss your comment or jump in with examples...

View Article

Re: How to switch a whole SAP system to be Display ONLY

the other bit to consider here - back to the business requirement and this being a production system If you create a display all role based on SAP_ALL and assign to end users then you risk providing...

View Article


Image may be NSFW.
Clik here to view.

Re: How to switch a whole SAP system to be Display ONLY

Hi Colleen, I totally agree that buidling a display role as equivalent for SAP_ALL does not work. I know this, because I tried and completely failed (see your linked post).  But in my opinion it also...

View Article

Re: Not able to generate profile in PFCG

Hi Dan, Yes, step 1 should only be executed once after system setup. Otherwise all your customer specific SU24 data, that you maintained over the past years, will be lost. As I described, step 1 copies...

View Article

Image may be NSFW.
Clik here to view.

Re: How to switch a whole SAP system to be Display ONLY

Hi Stefan I saw Bernand reply to you and my attempts at putting the case forward for Non-Prod wasn't successful either  For production, I agree  role should be built and driven via the role menu with...

View Article


Location of Security Logs

Hello, We are unable to login with Administrator user to http://Hostname:50000/irj and http://Hostname:50000/nwa. The issue is "We are not getting any error message".After the administrator's passwd is...

View Article


Re: Location of Security Logs

check the logs under \usr\sap\<SID>\J<instance_no>\j2ee\cluster\server0\log\ you can find default traces and under system there are security logs.

View Article

Image may be NSFW.
Clik here to view.

Re: Add Blart Validation to TCODE FPE1

Thanks Alex. Instead of using User Exit's, I used event 0060, which we were already using for some validation's. Thanks anyway  Mike

View Article

Re: Location of Security Logs

First look at the default traces which are at this location: usr/sap/<SID>/<Instance_ID>/j2ee/cluster/server/log/defaultTrace.x.trc reproduce the issue and look at the latest modified...

View Article

Re: Not able to generate profile in PFCG

Thanks again for your claification! Everything in regard to SU25 make a lot more sense now. Thanks,Dan

View Article


Re: Protecting user accounts - Reducing user account sharing

Hello Dionisio, have you alread activet the parameter "login/disable_multi_gui_login" to disable multi logon from users? the other thing with your idea about the e-mail notification is, that you must...

View Article

Re: Protecting user accounts - Reducing user account sharing

Thanks Bernhard, Yes, we have multilogin disabled and sure, we will need an internal table to control the user's terminal (probably more than one, and through and authorization process)  Regards,Dionisio

View Article


Re: Protecting user accounts - Reducing user account sharing

Hi, Bernhard has pointed out the most obvious method of reducing this.  If you do need to put in additional validation after logon then you can use exit SUSR001 to insert new code (caveat, this will...

View Article

Advance warning for SAP user id validity expiration on SAP Enterprise Portal

Dear Guru'sI have a doubt and would need your help to help me out...Can we show users a notification warning message if their SAP account (not password) validity is about to expire when they logon SAP...

View Article


Re: Protecting user accounts - Reducing user account sharing

Dear Alex, I have the same experience about sharing their "only" password, and I believe, it will best address the sharing issue. Unfortunately that solution is out of our reach for now... About the...

View Article

Re: Protecting user accounts - Reducing user account sharing

Hi Dionisio, I used the term "validation" inappropriately.  SUSR001 is the exit that happens immediately after logon so if you want something to happen such as sending an email, recording something,...

View Article

LSMW Batch processing issue

While fetching report from S_BCE_68001425 transaction using LSMW batch process i got an error.It wasn't able to fetch report. What I am trying to do is to automate the process of fetching role report...

View Article
Browsing all 5338 articles
Browse latest View live