API to add Actions to Role
Hi, This is in reference to com.sap.security.api. I am looking for a way to add Actions to Role. Tried the following: IPrincipalMaint principalMaint =...
View ArticleIs there a possibility that even when you remove a t-code from a role,...
Hey all, I would like to know if there is a possibility that authorizations get added to roles when you remove t-code from it... Kindly help me understand why this could happen or what can I check to...
View ArticleUser X not authorized to logon directly error
Hi, One of our users are experiencing an error while logging in to the system which says "User X not authorizedt o logon directly". The user type is DialogUser is not either expired or the password is...
View ArticleGenerated Analytic Privileges from BW Analysis Authorizations
Hi Experts, I need some information. We are using BW on HANA in our landscape. In BW, DSOs are being used as info provider. While activating DSOs, our developers select the check box "External SAP...
View ArticleAuthorization field for SAP Standard Field
Hello All, I having a query on Authorization field creation. We are having a field name "Follow Up Material" or NFMAT in MM01/MM02/MM03 Transaction under MRP4 Tab. I have checked if there is some...
View ArticleME21N restriction by material types
Hi We would like to restrict ME21N access by material type. I believe this is possible by turning on the authorisation check in SU24 for ME21N transaction for authorisation object M_MATE_MAR and once...
View ArticleCan a .Net application get the LogonTicket of an authenticated portal SSO...
A customer use a portal with SSO from windows clients. At the windows client the users login to a AD domain and in the browser they authenticate themself at the portal and work the whole day with this...
View ArticleValidate Keystore from mapping java UDF (SAP PI 7.4 java only)
Hi.First I try to explain the situation. We have interfaces with AFIP (government agency in Argentina for tax, electronic invoice...)We don't use the standard scenario for this (that in the SAP Note...
View ArticlePlant Level Security to hide costing
We need a way to hide costing in one plant in company 001 from all other users in other plants in the same company code (001) For example - we have 50 plants and 50 sales orgs in company code 001....
View ArticleWhat table is a user's language in?
The end result: I desire is a list of the language from the communication tab of a user profile.(This is different than the one under the defaults tab.) Langu_p is the field name. spras is the data...
View ArticleClik here to view.
PRGN_COMPRESS_TIMES in SAP R/3 4.6
Hi SAP Security comrades, I've a question from SAP 4.6 system - we need to remove the expired roles (duplicate ones) from users account. I checked in SA38 to run the program PRGN_COMPRESS_TIMES but it...
View ArticleHow to Track the SAP User Terminal Id in Citrix Environment.
HI Team, We are using Citrix in our organization , I have tried to find the user terminal ID in STAD ,but it provides me only Citrix server terminal Name .I have tried to track user through IP Address...
View ArticleClik here to view.
S_RFCACL not editable in release 701?
Hello, We're currently doing an upgrade from Release 700, SP-Level 014, to Release 701, SP-Level 016. In our CRM system, I'm trying to edit the authorization object S_RFCACL so I can add new SIDs. I'm...
View ArticleMaterial movement control
Hi We have a business requirement like this - a user can post all the movement types in plant 0001, while in plant 0002 he can only post movement type 1*. How should object M_MSEG_BWA and M_MSEG_WWA...
View ArticleConcern on SAP Security
Hi All,I have come across a research finding on the vulnerability of SAP installations, in the link below. How and what are you guys putting in place to countermeasure these...
View ArticleSame Derived role name - different profile while transporting to QAS/PRD
Hi. 1. I have Derived "Role2" in DEV,QAS,PRD2. In DEV - I had to change the Parent role, I could not edit the parent role. So Deleted the inheritance, deleted the derived role "Role2" and created new...
View ArticleDelete an already released transport request
Hello together, I have a problem in SE09/SE10 with a transport request. The request is as follows: Modifiable D01K939667 100 Username /Description D01K939668 Username...
View ArticleThe password change of User id created in OS level for SAP
Hi Support, In our SAP environment , the SAP Application and Database system are in 2 different system with the Operating system being Oracle Solaris 10. In the SAP application server we have the...
View ArticleCan a .Net application get the LogonTicket of an authenticated portal SSO...
A customer use a portal with SSO from windows clients. At the windows client the users login to a AD domain and in the browser they authenticate themself at the portal and work the whole day with this...
View ArticleManager of one PA able to see details of another PA
Dear All, We have 2 roles, one is a Manager Role which is based on structural authorization but have access to PA * and another role HR Admin which is specific to each Personnel Area.Problem is...
View Article