PFCG: Authorizations for object S_TCODE

Transcription

1 SAP Nte PFCG: Authrizatins fr bject S_TCODE Nte Language: English : 11 Validity: Valid Since Summary Symptm If yu set up a new rle (activity grup) with transactin PFCG and insert transactins r reprts int its menu, yu btain an authrizatin fr the bject S_TCODE in "Standard" status when yu merge the authrizatin data. Due t the changeability f this authrizatin, incnsistencies ccur in the fllwing cases: 1. As sn as yu make manual changes, the status f the authrizatin changes frm "Standard" t "Changed". This status change has the fllwing result: Transactins that are newly entered in the menu are included in the changed authrizatin. Hwever, transactins deleted frm the menu are nt deleted frm the authrizatin. T prevent users assigned t the rle frm still being able t execute these transactins, yu must delete them manually. 2. If yu have generated ther authrizatins fr S_TCODE in "Changed" and/r "Manually" status in additin t the standard authrizatin, the standard authrizatin is autmatically cmbined with the ther authrizatins in the next merge. The "Standard" status always disappears in this case, which results in the situatin described under pint 1. Other terms Prfile generatr, rle maintenance, activity grup maintenance, rle menu, activity grup menu Reasn and Prerequisites This prblem is caused by a prgram errr. Slutin Imprt the relevant Supprt Package r implement the crrectin instructins. If yu implement the slutin using the crrectin instructins, yu must create message 072 with fllwing the fllwing text in class 5@ (transactin SE91): Cpying standard authrizatins fr S_TCODE nt pssible Define the message as 'self-explanatry'. Explanatin It is nly pssible t ensure that the rle menu and authrizatin data match if the maintenance f a standard authrizatin fr S_TCODE is nt permitted n the screen "Change Rle/Activity Grup: Authrizatins". The attached crrectin therefre cancels all change functins (manual maintenance, delete field cntents, deactivate, cpy, cmbine with ther authrizatins) fr this special authrizatin. The autmatic cmbinatin Page 1 f 5

2 SAP Nte PFCG: Authrizatins fr bject S_TCODE f authrizatins described under symptm 2 is als canceled. Yu can nly make changes t the standard authrizatin fr S_TCODE by making changes t the rle menu r the authrizatin default values and then merging the authrizatin data. In additin, the crrectins cntain a special merging prcedure fr S_TCODE authrizatins that eliminates existing incnsistencies. It wrks as fllws: A new standard authrizatin is created int which bth the transactins in the rle menu and the transactins defined as authrizatin defaults in table USOBT_C are entered. The transactin cdes included in the standard authrizatin are deleted frm all ther authrizatins. If an authrizatin lses all transactins in this prcess, it is deleted cmpletely. Imprtant: Transactins that are cntained in generic values r intervals are still ignred because the merging prcedure des nt release this type f entry. Authrizatin in "Changed" status are cnverted t "Manually" fr three reans: - Since a standard authrizatin cannt be cpied r changed, authrizatins in "Changed" status are n lnger pssible. Old authrizatins with this status must therefre be adjusted t the new situatin. - The new "Manually" status crrespnds exactly t the actual situatin because, after the merge, the authrizatin nly cntains translatins that were entered manually. All menu transactins and default values were deleted (see abve). The fllwing statements apply t the handling f inactive authrizatins: - Inactive standard authrizatins with an active versin that is als standard disappear in the merge. The transactins cntained in the authrizatin are included in the new active standard authrizatin. - Authrizatins in "Inactive Standard" status with a "changed" active versin are cnverted, like the active authrizatin, t "Manually" status. - Authrizatins that had "Inactive manual" status befre the merge retain this status. In accrdance with the explanatin abve, several manual authrizatins may exist after the merge; these are nt autmatically cmbined. If rles with incnsistencies between menu and S_TCODE authrizatins exist in yur system, simply merge the rles again by selecting the expert mde fr reading the ld status and adjusting it t match the new data n the "Authrizatins" tab page Page 2 f 5

3 SAP Nte PFCG: Authrizatins fr bject S_TCODE Nte With the crrectin in nte , the deactivatin functin fr the standard authrizatin fr S_TCODE is re-intrduced. Hwever, all ther change functins remain deactivated. Header Data Release Status: Released fr Custmer Released n: :03:24 Master Language: German Pririty: Crrectin with high pririty Categry: Prgram errr Primary Cmpnent: BC-SEC-AUT-PFC ABAP Authrizatin and Rle Administratin Valid Releases Sftware Cmpnent Release Frm Release SAP_BASIS 46 46B 46D SAP_BASIS T Release and Subsequent Supprt Packages Supprt Packages Release Package Name SAP_BASIS 46B SAPKB46B54 SAP_BASIS 46C SAPKB46C45 SAP_BASIS 46D SAPKB46D34 SAP_BASIS 610 SAPKB61035 SAP_BASIS 610 SAPKB61036 SAP_BASIS 620 SAPKB62026 SAP_BASIS 620 SAPKB62027 Related Ntes Number Shrt Text General prcedure fr S_TCODE authrizatin default values Reprt PFCG_AGRS_WITH_MANUAL_S_TCODE is bslete PFCG: Varius errrs in the authrizatin data maintenance PFCG: Merging and cmbining authrizatins PFCG: Authrizatin checks in rle maintenance PFCG: Merge prcess when maintaining authrizatin data SP Patch Level Page 3 f 5

4 SAP Nte PFCG: Authrizatins fr bject S_TCODE Sftware Cmpnent Supprt Package SP Patch Level SAP KERNEL BIT UNICODE SP SAP KERNEL BIT SP SAP KERNEL BIT UNICODE SP SAP KERNEL BIT SP SAP KERNEL BIT UNICODE SP SAP KERNEL BIT SP SAP KERNEL 4.6D_EXT 32-BIT SP SAP KERNEL 4.6D_EXT 64-BIT SP SAP KERNEL 4.6D_EX2 32-BIT SP SAP KERNEL 4.6D_EX2 64-BIT SP Symptms - Side-Effects The fllwing SAP Ntes crrect this SAP Nte / patch: SAP Nte Reasn frm t SAP Nte Slutin Supprt Package SAPKB SAPKB SAPKB SAPKB SAPKB SAPKB SAPKB Page 4 f 5

5 SAP Nte PFCG: Authrizatins fr bject S_TCODE The fllwing SAP Ntes crrect this SAP Nte / patch: SAP Nte Reasn frm t SAP Nte Slutin Supprt Package SAPKB61035 Crrectin Instructins Crrecti n Instruct ins Valid frm Valid t Sftware Cmpnent Typ e *) Reference Crrectin Last Changed SAP_BASIS C Y6BK :00: SAP_BASIS C Y6BK :58: SAP_BASIS C Y6BK :02: B 610 SAP_BASIS C Y9CK :40: B 610 SAP_BASIS C Y9CK :42: B 610 SAP_BASIS C Y9CK :45:03 *) C Crrectin, B Preprcessing, A Pstprcessing, M Undefined Wrk Page 5 f 5