Deleting an authorization object

Question: Fans,

I am trying to delete an authorization object. Unfortunately, it is contained in an authorization. It is not in any role or profile. There is no way to update authorizations directly. I have tried deleting the role and recreating it - No help. Tried removing value from profile - does not show in SU02. Underlying table does show the authorization and values. Any ideas???

Answer:
The first impressions that I get is that the authorisation is coming from the program behind the authorisaiton it'self.

Have you considered getting a programmer to edit the program behind the authorisation to remove it ?

Answer:
I found that in program LSUSAF01, there is code to allow for the authorizatoin to be deleted even if it is included in SAP_ALL. I have submitted a message to SAP requesting some type of cleanup/reconciliation report.

Answer:
DO not be surprized if SAP responds "working as designed" and why do you have to delete it?

Answer:
Have you checked if the (custom defined?) authorization object is included in the SAP_ALL-profile? If so you may have to delete the profile and regenerate it afterwards.

Patrick

Answer:
Thanks. Yes, the custom object is no longer in SAP_ALL. I regenerated SAP_ALL with PRGN_CUST , ADD_ALL_CUST_OBJECTS = NO. So SAP_ALL is cool. The issue is that UST12 is out of sync with UST10S and USR12. I can find a way to reconcile.

Answer:
USTxx get out of sync over time and is the main cause of the SUIM reports being near to useless... But you can run function module SUSR_SYNC_USER_TABLES periodically to rectify. NOTE the values of TABLETYPE MUST be 'X' or nothing happens.