Question: I will try to explain my problem as best I can.
In Dev 900 (Security development client) I am having a strange situation when I add a transaction to a role but only in a small number of occurences.
Open role > add transaction to menu > go to authorization tab (profile) to tweek the oject values. I am finding 2 situations to be strange.
1. As opposed to appending and object with additional values from USOBT_C in certain cases it's changing the original value.
Example -
S_ARCHIVE - Activity 03
Application Area - BC
Archiving object - Workitem
When I add a transaction that would call this object from USOBT_C - it should add an additional authorization as opposed to changing the original. Instead, it's overwriting the existing authorization with an activity 01
This is where it gets really strange to me which is situation #2 -Tthe transaction I'm adding to the role doesn't even call S_ARCHIVE in the USOBT table. I'm adding SE16 and everbody knows that calls only S_TABU_DIS and S_GUI.
So - Why is the table overwriting an existing authorization as oppsed to appending as it always does? Secondly - why is a transaction changing objects in a profile when the transaction has absolutely no relationship to said object in USOBT_C or for that fact, in the ABAP code although the code has no impact at this point?
Final observation - I have only noticed this happening in a few instances. In most cases, transaction/table/profile/authorization relationship works as expected.
Hope my example makes sense and I greatly appreciate any guidance.
For reference we are on Enterprise 4.7.
Answer:
Use the overiview Icon for the object being overwritten. When you add a tcode SAP sets the "read old merge new" ( which you sould be using on every entry to a standard rolel and when it does this it evaluates EVERY tcode not the one you added. You may find the object being changed is in accordance to the configuration of SU24 for an unrelated tcode...
I would say, working as designed...with one exception, there is a kernel patch and upgrade that will cause PFCG to destroy all your roles. You must go tothe next patch.
Answer:
Thanks John,
Any idea on the specific kernel patch. The reason I ask is that I did notice the last support pack Basis put is is when this problem began. In our training environment which is not on that support pack, I can't duplicate this problem which did lead me to believe that may have an impact.
Thanks for the comments.
Answer:
I beleive there was a posting here a month or so back that has the specifics. I'm not where I can look it up... But when I get a change I will.
Answer:
I remember a posting from some one who bantered on about having your prod system on a higher patch level than your training system.
Maybe the problem is indeed training related?
Jaba
Answer:
Thanks Jaba but in our case, it's not a training issue. The training box (separate instance) is the only place we do not have the issue and that may be because it's on an older patch level. Our production landscape - Dev>QA>PRD is on a higher patch level. Right after Basis installed the support pack is when we noticed the issue. Prior to the current support pack, our production landscape was on the same kernl patch as what the training box is on now and it worked fine then.
That's why I'm interested in learning of the kernl patch John mentioned that could cause PFCG to do strange things.
thanks for the responses.
Answer:
HogFan . i beleive with Basis support 48 the condition shows up. see OSS Note 679050 for details.
_________________
How to Earn Rs.25000 every month in internet without Investment?
USOBT_C corrupt??
Labels:
SAP USER FAQs
Subscribe to:
Post Comments (Atom)
topics
-
▼
2007
(1406)
-
▼
November
(1359)
- Free Download SAP FI Certification study pdf books
- Implementing SAP R/3 on OS/400
- Update SAP Kernel in UNIX based
- Security Audit Log (BC-SEC).pdf
- Security Audit Log.pdf
- Securities,pdf
- Secure Store & Forward / Digital Signatures (BC-SE...
- Secure Network Communications (BC-SEC-SNC)
- Free download use ful T-codes
- I did not find any OSS notes appropriate for my pr...
- How to apply OSS notes number?
- What is OSS Notes number?
- Where can i access SAP OSS?
- WHAT IS OSS
- Disaster Recovery Plan to Restore Production System
- Steps to Install SAP Note in sap
- Difference Between SAP Notes and Support Package
- Question : Subject : Support packages testing
- Five Different "User Type"
- How to solve the Time Zone Definition Problems?
- Setting the User Decimals Format
- Schedule Manager
- Various Important SAP Basis T-Code
- Trace Functions in sap
- System Trace: Error Analysis in sap
- System Trace(ST01) in sap
- Roles and Authorizations Used in Background Proces...
- Deleting Multiple Spool Requests Simultaneously in...
- Logging and Tracing in spool
- Print and Output Management in spool
- Background Job Monitoring Monitor in CCMS
- Monitoring the Database Using the Alert Monitor
- Monitoring the Operating System Using the Alert Mo...
- Monitoring Memory Management Using the Alert Monitor
- Method Dispatching Monitor in CCMS
- Remote Application Server Status Monitor in CCMS
- GRMG Self-Monitoring Monitor in CCMS
- CCMS Selfmonitoring Monitor for System-Wide Data i...
- Logfile Monitoring Monitor in CCMS
- Logon Load Balancing Monitor in CCMS
- Transaction-Specific Dialog Monitor in CCMS
- Workload Collector Monitor in CCMS
- System Errors Monitor in CCMS
- System Configuration Monitor in CCMS
- Syslog Monitor in CCMS
- Spool System Monitor in CCMS
- Security Monitor in CCMS
- Performance Overview Monitor in CCMS
- Operating System Monitor in CCMS
- Filesystems Monitor in CCMS
- Entire System Monitor in CCMS
- Monitoring the Enqueue Service in CCMS
- Dialog per Application Server Monitor in CCMS
- Dialog Overview Monitor in CCMS
- Database Monitor in CCMS
- Transactional RFC and Queued RFC Monitor in CCMS
- Communications Monitor in CCMS
- Buffers Monitor in CCMS
- Background Job Monitoring Monitor(CCMS)
- Background Processing Monitor(CCMS)
- Availability and Performance Overview Monitor (CCMS)
- SAP CCMS Monitor Templates Monitor Set
- Creating and Changing a Monitoring Pause(CCMS)
- Creating and Changing Monitoring Rules(CCMS)
- Configuring Availability Monitoring(CCMS)
- Update Repositories(CCMS)
- Displaying Central Performance History Reports(CCMS)
- Displaying Report Properties
- Scheduling and Executing a Report
- Variables in Group Names
- Creating a Report Definition(CCMS)
- Maintaining Collection and Reorganization Schemata...
- Maintaining Collection and Reorganization Schemata...
- Creating and Editing a Calendar Schema(CCMS)
- Creating and Editing a Day Schema
- Customizing the Alert Monitor(CCMS)
- Resetting MTEs and Alerts(CCMS)
- Reorganizing Completed Alerts(CCMS)
- Display Completed Alerts(CCMS)
- Automatically Complete Alerts(CCMS)
- Completing Alerts(CCMS)
- Starting Methods (CCMS)
- Processing Alerts(CCMS_
- Displaying the Technical View: Central Performance...
- Displaying the Technical View: Threshold Values(CCMS)
- Displaying the Technical View: Status Autoreaction...
- Displaying the Technical View: Status Data Collector
- Displaying the Technical View: Method Allocation
- Displaying the Technical View: Info on MTE
- Display Types and Views of the Alert Monitor(CCMS)
- Properties of Status Attributes (CCMS)
- Properties of Performance Attributes(CCMS)
- Properties of Log Attributes (CCMS)
- General Properties of Monitoring Tree Elements(CCMS)
- Properties of Monitoring Objects and Attributes
- Elements of the Alert Monitoring Tree
- Alert Monitoring Tree(CCMS)
- Monitors(CCMS)
- Monitor Sets (CCMS)
- Elements of the Alert Monitor (CCMS)
-
▼
November
(1359)
No comments:
Post a Comment