SAP Library - Find your answers

I would encourage you to be part of the constructive forum team.
Don't be dishearted from this kind of posting. I think majority of the contributor are
helpful and welcoming.
For the response below: The functional guys give the specifications to the security team and the security team
does not work in vaccum; they don't do whatever they think they should, they do what the functional team/users ask them to
do.
Sidi

-----Original Message-----
From: Jyoti Narang via sap-acct <sap-acct@Groups.ITtoolbox.com>
To: Sidi94 <Auslaender3@aol.com>
Sent: Thu, 28 May 2009 4:40 am
Subject: Re: RE: [sap-acct] Risk in giving user AFAB and FBO1Hi,I don't know if I should post my reply to this or not. I seriously feel thatthere can be better ways to reply to the audience. I'm new to this forum butafter going through such replies, my reaction is to think a few times beforeasking any doubt in this forum.Knowledge can be shared and multiplied softly as well and we can be moreconsiderate and helpful.Thats my personal opinion. No intentions to offend anyone.Regards,Jyoti
On Thu, May 28, 2009 at 1:33 PM, Roy Brookes via sap-acct <sap-acct@groups.ittoolbox.com> wrote:>>> The security forum is the only place for security questions. We are not the> security experts here.> When you have earache do you go to the baker?> Rgds, Roy> Roy Brookes AFA, FInstBA,> SAP Financials Expert,
> Senior SAP FI-CO-TR Consultant> www.RoyBrookes.com> Roy.Brookes@RoyBrookes.com> Director,> Software Partner Solutions limited> www.software-partner-solutions.com> RB@software-partner-solutions.com> Roy.Brookes@Hamburg.de>> --------- Original message --------------> From: rebates007 via sap-acct <sap-acct@Groups.ITtoolbox.com>> Sent: Thu May 28 09:57:00 CEST 2009> To: Roy Brookes <Roy.Brookes@Hamburg.de>> Cc:> Subject: RE: [sap-acct] Risk in giving user AFAB and FBO1> >> > Hi Roy,> >> > GRC contains several rules like:> >> > risk:F006- Pay a vendor invoice and hide it via asset depreciation : Pay> an invoice and hide it in an asset that would be depreciated over time.> > Post depreciation> > AFAB> > Post Document> > FB01> >> >> > I just wonder how exactly they can generate a fraud?> >> > Do you think that this type of questions can be answered inside the> security forum?> >> > K.r.> >> > Dan> >> > ________________________________> > From: Roy Brookes via sap-acct [mailto:sap-acct@Groups.ITtoolbox.com]> > Sent: Thursday, May 28, 2009 9:48 AM> > To: LUYTEN Daniel (BUDG-EXT)> > Subject: AW:[sap-acct] Risk in giving user AFAB and FBO1> >> >> >> > The risk is that they may be able to do things. Maybe you do not want> that.> > Seriously this is a security question and should be in the security forum> not here.> > Rgds, Roy
> > Roy Brookes AFA, FInstBA,> > SAP Financials Expert,> > Senior SAP FI-CO-TR Consultant> > www.RoyBrookes.com> > Roy.Brookes@RoyBrookes.com> > Director,> > Software Partner Solutions limited> > www.software-partner-solutions.com> > RB@software-partner-solutions.com> > Roy.Brookes@Hamburg.de> >> > --------- Original message --------------> > From: rebates007 via sap-acct <sap-acct@Groups.ITtoolbox.com>> > Sent: Thu May 28 09:24:07 CEST 2009> > To: Roy Brookes <Roy.Brookes@Hamburg.de>> > Cc:> > Subject: [sap-acct] Risk in giving user AFAB and FBO1> > >> > >> > > Whats the risk giving a user AFAB(post depreciation) and FB01(posting)? __.____._