RE: [sap-security] SAPscript authorization
Posted by
Admin at
|
Share this post:
|
0 Comments
| | Posted by Rugs_119 on Apr 26 at 12:05 PM | |
Hello Henrik,
Yes I tried that (role with VA02 and SU53 only) and even without
defining values for the authorization object S_SCRP_TXT, I was able to
edit the standard text.
Please let me know if there is any other way to restrict authorization
to change header/item standard text within the sales order.
Thanks,
RR
________________________________
From: henrikmadsen2 via sap-security
[mailto:sap-security@Groups.ITtoolbox.com]
Sent: Friday, April 23, 2010 3:04 PM
To: Rugmani Rajan
Subject: Re: [sap-security] SAPscript authorization
Posted by henrikmadsen2 (GRC
Consultant )
on Apr 23 at 6:02 PM
Mark this reply as helpfulMark as helpful
<http://it.toolbox.com/api/ContentVote/3461389/1/1/>
To be honest, I don't think that object controls the text... If you can
access VA02, you can update the text.
Quick check:
Build role with VA02 and SU53 only. Ensure the object isn't present at
all.
Then check..
/henrik
On 24 April 2010 06:22, lnb1434 via sap-security <
sap-security@groups.ittoolbox.com> wrote:
> Posted by lnb1434(SAP Security Admin)
> on Apr 23 at 4:23 PM
> I would check if the same object is available in any other role. If
not,
> ST01 trace would help too.
>
> ---------------Original Message---------------
> From: Rugs_119
> Sent: Friday, April 23, 2010 4:17 PM
> Subject: SAPscript authorization
>
> > Hello,
> >
> >
> >
> > I am trying to restrict the access to change standard header/item
text
> > in a sales order (VA02). The corresponding authorization object is
> > S_SCRP_TXT. I set the authorization to 'Display (03)' for this
> > authorization object. Despite that, I am able to change the text in
the
> > sales order.
> >
> >
> >
> > Please let me know if there is any other way to achieve this.
> >
> >
> >
> > Thanks,
> >
> > RR
__.____._ Yes I tried that (role with VA02 and SU53 only) and even without
defining values for the authorization object S_SCRP_TXT, I was able to
edit the standard text.
Please let me know if there is any other way to restrict authorization
to change header/item standard text within the sales order.
Thanks,
RR
________________________________
From: henrikmadsen2 via sap-security
[mailto:sap-security@Groups.ITtoolbox.com]
Sent: Friday, April 23, 2010 3:04 PM
To: Rugmani Rajan
Subject: Re: [sap-security] SAPscript authorization
Posted by henrikmadsen2 (GRC
Consultant )
on Apr 23 at 6:02 PM
Mark this reply as helpfulMark as helpful
<http://it.toolbox.com/api/ContentVote/3461389/1/1/>
To be honest, I don't think that object controls the text... If you can
access VA02, you can update the text.
Quick check:
Build role with VA02 and SU53 only. Ensure the object isn't present at
all.
Then check..
/henrik
On 24 April 2010 06:22, lnb1434 via sap-security <
sap-security@groups.ittoolbox.com> wrote:
> Posted by lnb1434(SAP Security Admin)
> on Apr 23 at 4:23 PM
> I would check if the same object is available in any other role. If
not,
> ST01 trace would help too.
>
> ---------------Original Message---------------
> From: Rugs_119
> Sent: Friday, April 23, 2010 4:17 PM
> Subject: SAPscript authorization
>
> > Hello,
> >
> >
> >
> > I am trying to restrict the access to change standard header/item
text
> > in a sales order (VA02). The corresponding authorization object is
> > S_SCRP_TXT. I set the authorization to 'Display (03)' for this
> > authorization object. Despite that, I am able to change the text in
the
> > sales order.
> >
> >
> >
> > Please let me know if there is any other way to achieve this.
> >
> >
> >
> > Thanks,
> >
> > RR
Copyright © 2010 Toolbox.com and message author.
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
Related Content
In the Spotlight
White Papers
In the Spotlight
Your SAP Security is at Risk...Learn How to Stay Protected. Read the free white paper from SenSage
View this thread online
Manage group e-mails
Create an FAQ on this topic
Tell us what you think
Unsubscribe from discussion
Manage group e-mails
Create an FAQ on this topic
Tell us what you think
Unsubscribe from discussion