Re: AR 31 and AR32 - Edit and Create worklist
Probably the test IDs are service type users and not dialog. Change the user type and you should be fine (except that the testers will change the passwords...). Cheers,Julius
View Articlesecuring SARA transaction advice
The archiving team uses SARA and other technical transactions in production to archive data, however SARA does not work unless the user is also assigned business-related authorization objects such as...
View ArticleRe: How to resolve intra role conflicts
well if the risk is in the role itself, then you have only two choices: mitigate the role (awkward) or redesign the role as you suggested. If soD is important to your client then they should move to...
View ArticleRe: Transaction to a role
hey just to point out. In SU24, there can be a Check/Maint value on S_TCODE having specific values of other tcodes that will cause additional Tcodes to enter S_TCODE of a role without being seen in...
View ArticleRe: remote host supports the use of SSL ciphers that offer weak encryption
HI Patrick, you are right. I completely missed that you suggested excluding MD5. Sorry about that. I guess we agree that Lalitha needs to get an actual list of cipher suites and compare it with list of...
View ArticleRe: How to easily maintain Parameters IDs
yes, I will finally try to change the synchronization option in SCUM. I'll let you know if this will work. Laura
View ArticleRe: Alternative Tcode in SAP ECC6 after upgrade from SAP4.6
Hi In fact table PRGN_CORR2 gives some correspondence for old Tcodes 991377 - Missing entries in table PRGN_CORR2 Regards
View ArticleRe: How to resolve intra role conflicts
Hello. Last time I heard about this problem, the problem went away after the number of GRC rules used for the check was lowered from all their millions of rules to the most important ones that pose a...
View ArticleClik here to view.
Re: AR 31 and AR32 - Edit and Create worklist
Hi Julius, Thanks for quick reply. I had already tried by changing to dialog as well, but no luck. I gave one more try, but got some missing objects in trace. But adding those didn't solve the problem....
View ArticleP_ABAP not skipping the authorization check
Hi All, I would require your assistance on the following issue at earliest. HR key users are executing the HR standard reports by using the t-code S_PH0_48000509 Adhoc query and also with t-code...
View ArticleRe: Unable to find entries in RSECVAL tables for new Analytics Authorization...
Hi, Please look at this note 1978243 The database tables RSECVAL and RSECHIE that store analytical authorization objects are no longer required. The contents of the program RSD_XPRA_REPAIR_RSCHAVL_740,...
View ArticleRe: securing SARA transaction advice
It is good to know somebody else is using the S_BTCH_NAM solution because that is what we have been doing. I just don't like giving that auth because our permitted userID has a lot of authorizations,...
View ArticleRe: Need advice for transportation of Derived and parent roles
Maybe you can explain what is meant by collision? I'm thinking that if you have not changed the parent role (adding Tcodes to menu, changing auth values, etc), then it should not matter if it is...
View ArticleSAP Security Access Restriction for Material Movements based on Prd order...
Hi, Is there any way to restrict security access to post material movements to the production orders belongs to a specific plant in SAP? Scenario: User : A Plants : Plant 1 and Plant 2 User A works at...
View ArticleRe: Need advice for transportation of Derived and parent roles
Hi Prakash transport collision for pfcg roles occur when a different role in the system you are moving the transport to has the same profile code check table agr_prof or agr_1016 for role to profile...
View ArticleRe: AR 31 and AR32 - Edit and Create worklist
Are you running the trace in a system that has multiple app servers? If so, make sure you're tracing on server user is executing functionality on other way to investigate is to trace your access and...
View ArticleClik here to view.
Re: securing SARA transaction advice
Colleen's idea. I just wanted to say I actually did it and it works to support the idea Good luck. Maybe.. if I dare... let us know here how it goes Cheers Otto
View ArticleDisplay User Sessions
Hello everyone!With the transition SM04 I can display all the users active in the system who are logged on. I need to display users with name of workstation at witch the user is working who are logged...
View ArticleRe: Display User Sessions
Have you considered using the securty audit log? That will give you the terminal name and the user name over a longer period of time.
View Articlemax no of profiles per user
HI everybody An interviewer asked that you have to assign 10 roles to user,but 9 roles it self the max no of (312) profiles, are reached.then how to assign 10 th rolewhat procedure you follow.Of...
View Article