Re: [sap-security] Assign roles via LSMW in CUA environment doesnot work
Posted by
Admin at
|
Share this post:
|
|
0 Comments
 | Posted by Alex Ayers (Director of Operations) on Mar 12 at 10:10 AM |  Mark as helpful |
Hi LEH,
I've been using eCATT's with CUA for years now, the only problems are the
usual idoc reprocessing queues in the child system
On 12 March 2010 08:07, Lars-Erik Hallsten via sap-security <
sap-security@groups.ittoolbox.com> wrote:
> Posted by Lars-Erik Hallsten(CEO & Senior Consultant)
> on Mar 12 at 3:07 AM
> Hi Henrik
>
>
>
> Are you sure that eCatt works?
>
> The note does not specifically say LSMW, but refers to all batch input
> tools, it seems.
>
>
>
> Regards,
>
> LEH
>
>
>
> From: henrikmadsen2 via sap-security
> [mailto:sap-security@Groups.ITtoolbox.com]
> Sent: 11. mars 2010 10:20
> To: Lars-Erik Hallsten
> Subject: Re: [sap-security] Assign roles via LSMW in CUA environment
> doesnot
> work
>
>
>
>
>
>
>
>
> Posted by henrikmadsen2 (GRC
> Consultant )
> on Mar 11 at 4:20 PM
>
> <http://it.toolbox.com/api/ContentVote/3366930/1/1 /> Mark this reply as
> helpfulMark as helpful
>
> I did not know that! Thanks for posting. Sticking to good old eCatt then
> :-)
>
> At least that works
>
> On 11 March 2010 18:25, DirkM via sap-security <
> sap-security@groups.ittoolbox.com> wrote:
>
> >
> > Posted by DirkM (Security Analyst)
> > on Mar 11 at 2:28 AM
> > Dear all,
> >
> > see the following answer from SAP.
> > This is the end for the combination CUA/LSMW
> >
> > Thanks......
> > Dirk
> >
> > --------------------------------------------------
> > ----------------------------------
> > Hello Dirk,
> >
> > unfortunately LSMW does not work for SU01/10 if you use a CUA.
> > This is because of technical reasons (commits during the transaction
> > are necessary to create the idocs but aren't triggered with BI).
> >
> > After saving a newly created user in a CUA, three different IDocs
> > ('User', 'Activity Group Assign', and 'Profile Assign') are sent to the
> > corresponding child systems.
> >
> > For reasons of ALE processing, a 'commit' is carried out after each of
> > those IDocs. As already mentioned, this prematurely terminates
> > processing in the batch input session after sending the first IDoc.
> > We can not remove all COMMIT statements as they are absolutely
> necessaryfor
> > the ALE (IDOC) processing.
> >
> > I attach the note #93802 usermaintenance in Batch Input
> > where this fact is documented.
> >
> > You can however use the function module BAPI_USER_CREATE to create
> > user and function modules BAPI_USER_LOCACTGROUPS_ASSIGN &
> > BAPI_USER_LOCprofileS_ASSIGN to assign role/profiles.
> >
> > Please see the security forums on www.sdn.sap.com where you can post
> > further queries and see how other users have been successful
> > in mass update of user information.
> >
> >
> > Many thanks,
> >
> > Senior Support Consultant II
> > SAP Active Global Support
> > --------------------------------------------------
> > ----------------------------------------
> >
> > ---------------Original Message---------------
> > From: DirkM
> > Sent: Tuesday, March 09, 2010 10:14 AM
> > Subject: Assign roles via LSMW in CUA environment doesnot work
> >
> > > Dear all,
> > >
> > > I want to assign the roles by LSMW to the users in a CUA environment.
> > Normally (with SU01 SU10) the update to the client system is done by 3
> IDOCS
> > per client. The update for the roles is done in the 3rd IDOC.
> > >
> > > In the case of the LSMW only the first IDOC is created and executed.
> IDOC
> > number 2 and 3 are not created.
> > > The LSMW is ending without errors, there is no problem in the syslog
> > and/or ST22.
> > >
> > > Can you help me ?
> > >
> > > Thanks.
> > >
> > > Dirk
__.____._ I've been using eCATT's with CUA for years now, the only problems are the
usual idoc reprocessing queues in the child system
On 12 March 2010 08:07, Lars-Erik Hallsten via sap-security <
sap-security@groups.ittoolbox.com> wrote:
> Posted by Lars-Erik Hallsten(CEO & Senior Consultant)
> on Mar 12 at 3:07 AM
> Hi Henrik
>
>
>
> Are you sure that eCatt works?
>
> The note does not specifically say LSMW, but refers to all batch input
> tools, it seems.
>
>
>
> Regards,
>
> LEH
>
>
>
> From: henrikmadsen2 via sap-security
> [mailto:sap-security@Groups.ITtoolbox.com]
> Sent: 11. mars 2010 10:20
> To: Lars-Erik Hallsten
> Subject: Re: [sap-security] Assign roles via LSMW in CUA environment
> doesnot
> work
>
>
>
>
>
>
>
>
> Posted by henrikmadsen2 (GRC
> Consultant )
> on Mar 11 at 4:20 PM
>
> <http://it.toolbox.com/api/ContentVote/3366930/1/1 /> Mark this reply as
> helpfulMark as helpful
>
> I did not know that! Thanks for posting. Sticking to good old eCatt then
> :-)
>
> At least that works
>
> On 11 March 2010 18:25, DirkM via sap-security <
> sap-security@groups.ittoolbox.com> wrote:
>
> >
> > Posted by DirkM (Security Analyst)
> > on Mar 11 at 2:28 AM
> > Dear all,
> >
> > see the following answer from SAP.
> > This is the end for the combination CUA/LSMW
> >
> > Thanks......
> > Dirk
> >
> > --------------------------------------------------
> > ----------------------------------
> > Hello Dirk,
> >
> > unfortunately LSMW does not work for SU01/10 if you use a CUA.
> > This is because of technical reasons (commits during the transaction
> > are necessary to create the idocs but aren't triggered with BI).
> >
> > After saving a newly created user in a CUA, three different IDocs
> > ('User', 'Activity Group Assign', and 'Profile Assign') are sent to the
> > corresponding child systems.
> >
> > For reasons of ALE processing, a 'commit' is carried out after each of
> > those IDocs. As already mentioned, this prematurely terminates
> > processing in the batch input session after sending the first IDoc.
> > We can not remove all COMMIT statements as they are absolutely
> necessaryfor
> > the ALE (IDOC) processing.
> >
> > I attach the note #93802 usermaintenance in Batch Input
> > where this fact is documented.
> >
> > You can however use the function module BAPI_USER_CREATE to create
> > user and function modules BAPI_USER_LOCACTGROUPS_ASSIGN &
> > BAPI_USER_LOCprofileS_ASSIGN to assign role/profiles.
> >
> > Please see the security forums on www.sdn.sap.com where you can post
> > further queries and see how other users have been successful
> > in mass update of user information.
> >
> >
> > Many thanks,
> >
> > Senior Support Consultant II
> > SAP Active Global Support
> > --------------------------------------------------
> > ----------------------------------------
> >
> > ---------------Original Message---------------
> > From: DirkM
> > Sent: Tuesday, March 09, 2010 10:14 AM
> > Subject: Assign roles via LSMW in CUA environment doesnot work
> >
> > > Dear all,
> > >
> > > I want to assign the roles by LSMW to the users in a CUA environment.
> > Normally (with SU01 SU10) the update to the client system is done by 3
> IDOCS
> > per client. The update for the roles is done in the 3rd IDOC.
> > >
> > > In the case of the LSMW only the first IDOC is created and executed.
> IDOC
> > number 2 and 3 are not created.
> > > The LSMW is ending without errors, there is no problem in the syslog
> > and/or ST22.
> > >
> > > Can you help me ?
> > >
> > > Thanks.
> > >
> > > Dirk
Copyright © 2010 Toolbox.com and message author.
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
Alex AyersSAP Security Helper
Posted helpful replies on 5 threads in a group to earn a Bronze Achievement
Related Content
In the Spotlight
White Papers
In the Spotlight
Earn Recognition for Your Contributions at Toolbox for IT. Gain Points for Community Achievements
View this thread online
Manage group e-mails
Create an FAQ on this topic
Tell us what you think
Unsubscribe from discussion
Manage group e-mails
Create an FAQ on this topic
Tell us what you think
Unsubscribe from discussion
_.____.__ 
