RE: [sap-security] Authorization Object not validated at execution time
Posted by
Admin at
|
Share this post:
|
|
0 Comments
 | Posted by LouisLau (Mr.) on May 6 at 11:43 AM |  Mark as helpful |
Hello Anjan/Sonia,
If I add a new object to transaction CJI3 via SU24; I understand the program, or it's copy, has to be updated. Object K_REPO_OPA, however, is SAP delivered, except the status is 'Do not Check'. After changing the 'Check Ind.' To 'Check', the green light comes on and, by clicking 'SAP Data', you can see that the 'SAP Check Indicator' is also changed to 'Check'.
Sonia, you said changing the object to 'CM', are you referring to changing the Check Indicator (what I have done) or are you referring to another step I am not aware of?
Thank you,
Louis
From: Sonia via sap-security [mailto:sap-security@Groups.ITtoolbox.com]
Sent: May 6, 2010 4:56 AM
To: Lau, Louis
Subject: Re: [sap-security] Authorization Object not validated at execution time
Posted by Sonia (Sap Basis and Securiy Analyst)
on May 6 at 8:00 AM Mark as helpful
Louis,
Yes I agree with anjan pandy. You have to change this object to "CM" in
Su24 for CJI3 and update the program(RKPEP003).
Thank you,
Sonia
On Thu, May 6, 2010 at 1:02 AM, anjan.pandey via sap-security <
sap-security@groups.ittoolbox.com> wrote:
> Posted by anjan.pandey
> on May 6 at 1:01 AM
> Hi Louis
>
> Program(RKPEP003) called by transaction CJI3 needs to be updated to have
> authrization checks for object "K_REPO_OPA". Just enabling the SU24 values
> and importing the values in roles won't help.
>
> Note: As per SAP recommendation no SAP delivered program is supposed to be
> changed. For any changes you can copy the existing program into a custom
> program and apply your changes.
>
> Thanks.
> Anjan Pandey
>
> On Thu, May 6, 2010 at 6:45 AM, Sonia via sap-security <
> sap-security@groups.ittoolbox.com> wrote:
>
> > Posted by Sonia(Sap Basis and Securiy Analyst)
> > on May 5 at 9:17 PM
> > Louis,
> >
> > Did you change this object to "CM" in Su24 for CJI3.
> >
> > Thank you,
> > Sonia
> >
> > On Wed, May 5, 2010 at 6:21 PM, LouisLau via sap-security <
> > sap-security@groups.ittoolbox.com> wrote:
> >
> > > Posted by LouisLau(Mr.)
> > > on May 5 at 6:19 PM
> > > Hello all,
> > >
> > > With transaction SU24, I change the Check Indicator for transaction
> CJI3,
> >
> > > Object K_REPO_OPA to 'Check' and Proposal to 'YS'; the values are
> > populated
> > > correctly in PFCG. However, the Object K_REPO_OPA is not validated at
> > > execution time. What do I have to do to activate the check?
> > >
> > > Thank you in advance,
> > > Louis
__.____._ If I add a new object to transaction CJI3 via SU24; I understand the program, or it's copy, has to be updated. Object K_REPO_OPA, however, is SAP delivered, except the status is 'Do not Check'. After changing the 'Check Ind.' To 'Check', the green light comes on and, by clicking 'SAP Data', you can see that the 'SAP Check Indicator' is also changed to 'Check'.
Sonia, you said changing the object to 'CM', are you referring to changing the Check Indicator (what I have done) or are you referring to another step I am not aware of?
Thank you,
Louis
From: Sonia via sap-security [mailto:sap-security@Groups.ITtoolbox.com]
Sent: May 6, 2010 4:56 AM
To: Lau, Louis
Subject: Re: [sap-security] Authorization Object not validated at execution time
Posted by Sonia (Sap Basis and Securiy Analyst)
on May 6 at 8:00 AM Mark as helpful
Louis,
Yes I agree with anjan pandy. You have to change this object to "CM" in
Su24 for CJI3 and update the program(RKPEP003).
Thank you,
Sonia
On Thu, May 6, 2010 at 1:02 AM, anjan.pandey via sap-security <
sap-security@groups.ittoolbox.com> wrote:
> Posted by anjan.pandey
> on May 6 at 1:01 AM
> Hi Louis
>
> Program(RKPEP003) called by transaction CJI3 needs to be updated to have
> authrization checks for object "K_REPO_OPA". Just enabling the SU24 values
> and importing the values in roles won't help.
>
> Note: As per SAP recommendation no SAP delivered program is supposed to be
> changed. For any changes you can copy the existing program into a custom
> program and apply your changes.
>
> Thanks.
> Anjan Pandey
>
> On Thu, May 6, 2010 at 6:45 AM, Sonia via sap-security <
> sap-security@groups.ittoolbox.com> wrote:
>
> > Posted by Sonia(Sap Basis and Securiy Analyst)
> > on May 5 at 9:17 PM
> > Louis,
> >
> > Did you change this object to "CM" in Su24 for CJI3.
> >
> > Thank you,
> > Sonia
> >
> > On Wed, May 5, 2010 at 6:21 PM, LouisLau via sap-security <
> > sap-security@groups.ittoolbox.com> wrote:
> >
> > > Posted by LouisLau(Mr.)
> > > on May 5 at 6:19 PM
> > > Hello all,
> > >
> > > With transaction SU24, I change the Check Indicator for transaction
> CJI3,
> >
> > > Object K_REPO_OPA to 'Check' and Proposal to 'YS'; the values are
> > populated
> > > correctly in PFCG. However, the Object K_REPO_OPA is not validated at
> > > execution time. What do I have to do to activate the check?
> > >
> > > Thank you in advance,
> > > Louis
Copyright © 2010 Toolbox.com and message author.
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
Related Content
In the Spotlight
White Papers
In the Spotlight
Toolbox.com for iPhone: Ask Questions & Get Answers Anywhere. Use the New iPhone App
View this thread online
Manage group e-mails
Create an FAQ on this topic
Tell us what you think
Unsubscribe from discussion
Manage group e-mails
Create an FAQ on this topic
Tell us what you think
Unsubscribe from discussion
_.____.__ 
