R/3 Security Guide : VOLUME III
Short summary:
Reducing the Scope of Authority Checks in R/3
Is it necessary to reduce the scope of authority checks? our Security Consulting Team within the SAP Administrator. group? How are the access control lists for R/3 resources defined usr sap ...
Long summary:
If you operate in a centralized
environment, it may be more appropriate
to have a single superuser who performs
all user and authorization maintenance
tasks.
In a decentralized administration
environment, we recommend dividing the
tasks so that they are covered by several
administrators.
Do your administrators belong to the group SUPER?
Only an administrator with the profile
S_A.SYSTEM can change users
belonging to the group SUPER. The authority check against the object
S_TCODE is automatically performed in
R/3 for transaction starts over the menu or
command line (as of Release 3.0E).
Do you assign reports to report classes?
Report RSCSAUTH
OSS Note 7642
Report RSCSAUTH
documentation
Do you assign authorization groups to tables?
Assign an authorization group to
tables in the Table TDDAT.
We do deliver a number of tables with pre-
defined authorization groups.
Reducing the Scope of Authority Checks in R/3
Is it necessary to reduce the scope of authority checks?
Have you carefully considered the security aspects
involved?
Company policy
We advise you to consider this option
carefully before suppressing authority
checks.
Source: web.mit.edu
Search Terms:
Related
SAP Business Information Warehouse Architecture, SAP entered the data warehouse market when
it started maturing ... provide the same
data in different specifications,
technical formats, or with a different ...,
more
SAP Data Provider, SAP Data Provider. SAP AG. Technical
Reference. 18. April 2001 ... SAP AG. SAP
Data Provider. Technical Reference. April
2001. 19 ...,
more
SAP Data Archiving, amounts of enterprise data, which is
stored in SAP R/3. With passage of time,
... this approach, AS requires detailed,
technical knowledge of the database table
...,
more
