RE: [sap-security] SAPscript authorization
Posted by
Admin at
Share this post:
|
0 Comments
Posted by Rugs_119 on Apr 26 at 12:05 PM | Mark as helpful |
Hello Henrik,
Yes I tried that (role with VA02 and SU53 only) and even without
defining values for the authorization object S_SCRP_TXT, I was able to
edit the standard text.
Please let me know if there is any other way to restrict authorization
to change header/item standard text within the sales order.
Thanks,
RR
________________________________
From: henrikmadsen2 via sap-security
[mailto:sap-security@Groups.ITtoolbox.com]
Sent: Friday, April 23, 2010 3:04 PM
To: Rugmani Rajan
Subject: Re: [sap-security] SAPscript authorization
Posted by henrikmadsen2 (GRC
Consultant )
on Apr 23 at 6:02 PM
Mark this reply as helpfulMark as helpful
<http://it.toolbox.com/api/ContentVote/3461389/1/1/>
To be honest, I don't think that object controls the text... If you can
access VA02, you can update the text.
Quick check:
Build role with VA02 and SU53 only. Ensure the object isn't present at
all.
Then check..
/henrik
On 24 April 2010 06:22, lnb1434 via sap-security <
sap-security@groups.ittoolbox.com> wrote:
> Posted by lnb1434(SAP Security Admin)
> on Apr 23 at 4:23 PM
> I would check if the same object is available in any other role. If
not,
> ST01 trace would help too.
>
> ---------------Original Message---------------
> From: Rugs_119
> Sent: Friday, April 23, 2010 4:17 PM
> Subject: SAPscript authorization
>
> > Hello,
> >
> >
> >
> > I am trying to restrict the access to change standard header/item
text
> > in a sales order (VA02). The corresponding authorization object is
> > S_SCRP_TXT. I set the authorization to 'Display (03)' for this
> > authorization object. Despite that, I am able to change the text in
the
> > sales order.
> >
> >
> >
> > Please let me know if there is any other way to achieve this.
> >
> >
> >
> > Thanks,
> >
> > RR
__.____._ Yes I tried that (role with VA02 and SU53 only) and even without
defining values for the authorization object S_SCRP_TXT, I was able to
edit the standard text.
Please let me know if there is any other way to restrict authorization
to change header/item standard text within the sales order.
Thanks,
RR
________________________________
From: henrikmadsen2 via sap-security
[mailto:sap-security@Groups.ITtoolbox.com]
Sent: Friday, April 23, 2010 3:04 PM
To: Rugmani Rajan
Subject: Re: [sap-security] SAPscript authorization
Posted by henrikmadsen2 (GRC
Consultant )
on Apr 23 at 6:02 PM
Mark this reply as helpfulMark as helpful
<http://it.toolbox.com/api/ContentVote/3461389/1/1/>
To be honest, I don't think that object controls the text... If you can
access VA02, you can update the text.
Quick check:
Build role with VA02 and SU53 only. Ensure the object isn't present at
all.
Then check..
/henrik
On 24 April 2010 06:22, lnb1434 via sap-security <
sap-security@groups.ittoolbox.com> wrote:
> Posted by lnb1434(SAP Security Admin)
> on Apr 23 at 4:23 PM
> I would check if the same object is available in any other role. If
not,
> ST01 trace would help too.
>
> ---------------Original Message---------------
> From: Rugs_119
> Sent: Friday, April 23, 2010 4:17 PM
> Subject: SAPscript authorization
>
> > Hello,
> >
> >
> >
> > I am trying to restrict the access to change standard header/item
text
> > in a sales order (VA02). The corresponding authorization object is
> > S_SCRP_TXT. I set the authorization to 'Display (03)' for this
> > authorization object. Despite that, I am able to change the text in
the
> > sales order.
> >
> >
> >
> > Please let me know if there is any other way to achieve this.
> >
> >
> >
> > Thanks,
> >
> > RR
Copyright © 2010 Toolbox.com and message author.
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
Related Content
In the Spotlight
_.____.__ White Papers
In the Spotlight
Your SAP Security is at Risk...Learn How to Stay Protected. Read the free white paper from SenSage