Re: [sap-security] Authorization Object not validated at execution time
Posted by
Admin at
|
Share this post:
|
|
0 Comments
 | Posted by Sonia (Sap Basis and Securiy Analyst) on May 6 at 3:22 PM |  Mark as helpful |
Louis,
As per you statement you have changed the Su24 values for K_REPO_OPA to YS
. done
Now you approach ABAP developer and ask him to copy the existing program
into a custom program and apply your changes.
After this go to the PFCG - give the role (which has CJI3 tcode) -> Auth
tab -> export mode -> read old status and merge with new data by this
objects will get pulled into the role.
Thank you,
Sonia
On Thu, May 6, 2010 at 11:39 AM, LouisLau via sap-security <
sap-security@groups.ittoolbox.com> wrote:
> Posted by LouisLau(Mr.)
> on May 6 at 11:43 AM
> Hello Anjan/Sonia,
>
> If I add a new object to transaction CJI3 via SU24; I understand the
> program, or it's copy, has to be updated. Object K_REPO_OPA, however, is SAP
> delivered, except the status is 'Do not Check'. After changing the 'Check
> Ind.' To 'Check', the green light comes on and, by clicking 'SAP Data', you
> can see that the 'SAP Check Indicator' is also changed to 'Check'.
>
> Sonia, you said changing the object to 'CM', are you referring to changing
> the Check Indicator (what I have done) or are you referring to another step
> I am not aware of?
>
> Thank you,
> Louis
>
> From: Sonia via sap-security [mailto:sap-security@Groups.ITtoolbox.com]
> Sent: May 6, 2010 4:56 AM
> To: Lau, Louis
> Subject: Re: [sap-security] Authorization Object not validated at execution
> time
>
> Posted by Sonia (Sap Basis and Securiy Analyst)
> on May 6 at 8:00 AM Mark as helpful
>
> Louis,
>
> Yes I agree with anjan pandy. You have to change this object to "CM" in
> Su24 for CJI3 and update the program(RKPEP003).
>
>
>
> Thank you,
> Sonia
> On Thu, May 6, 2010 at 1:02 AM, anjan.pandey via sap-security <
> sap-security@groups.ittoolbox.com> wrote:
>
> > Posted by anjan.pandey
> > on May 6 at 1:01 AM
> > Hi Louis
> >
> > Program(RKPEP003) called by transaction CJI3 needs to be updated to have
> > authrization checks for object "K_REPO_OPA". Just enabling the SU24
> values
> > and importing the values in roles won't help.
> >
> > Note: As per SAP recommendation no SAP delivered program is supposed to
> be
> > changed. For any changes you can copy the existing program into a custom
> > program and apply your changes.
> >
> > Thanks.
> > Anjan Pandey
> >
> > On Thu, May 6, 2010 at 6:45 AM, Sonia via sap-security <
> > sap-security@groups.ittoolbox.com> wrote:
> >
> > > Posted by Sonia(Sap Basis and Securiy Analyst)
> > > on May 5 at 9:17 PM
> > > Louis,
> > >
> > > Did you change this object to "CM" in Su24 for CJI3.
> > >
> > > Thank you,
> > > Sonia
> > >
> > > On Wed, May 5, 2010 at 6:21 PM, LouisLau via sap-security <
> > > sap-security@groups.ittoolbox.com> wrote:
> > >
> > > > Posted by LouisLau(Mr.)
> > > > on May 5 at 6:19 PM
> > > > Hello all,
> > > >
> > > > With transaction SU24, I change the Check Indicator for transaction
> > CJI3,
> > >
> > > > Object K_REPO_OPA to 'Check' and Proposal to 'YS'; the values are
> > > populated
> > > > correctly in PFCG. However, the Object K_REPO_OPA is not validated at
>
> > > > execution time. What do I have to do to activate the check?
> > > >
> > > > Thank you in advance,
> > > > Louis
__.____._ As per you statement you have changed the Su24 values for K_REPO_OPA to YS
. done
Now you approach ABAP developer and ask him to copy the existing program
into a custom program and apply your changes.
After this go to the PFCG - give the role (which has CJI3 tcode) -> Auth
tab -> export mode -> read old status and merge with new data by this
objects will get pulled into the role.
Thank you,
Sonia
On Thu, May 6, 2010 at 11:39 AM, LouisLau via sap-security <
sap-security@groups.ittoolbox.com> wrote:
> Posted by LouisLau(Mr.)
> on May 6 at 11:43 AM
> Hello Anjan/Sonia,
>
> If I add a new object to transaction CJI3 via SU24; I understand the
> program, or it's copy, has to be updated. Object K_REPO_OPA, however, is SAP
> delivered, except the status is 'Do not Check'. After changing the 'Check
> Ind.' To 'Check', the green light comes on and, by clicking 'SAP Data', you
> can see that the 'SAP Check Indicator' is also changed to 'Check'.
>
> Sonia, you said changing the object to 'CM', are you referring to changing
> the Check Indicator (what I have done) or are you referring to another step
> I am not aware of?
>
> Thank you,
> Louis
>
> From: Sonia via sap-security [mailto:sap-security@Groups.ITtoolbox.com]
> Sent: May 6, 2010 4:56 AM
> To: Lau, Louis
> Subject: Re: [sap-security] Authorization Object not validated at execution
> time
>
> Posted by Sonia (Sap Basis and Securiy Analyst)
> on May 6 at 8:00 AM Mark as helpful
>
> Louis,
>
> Yes I agree with anjan pandy. You have to change this object to "CM" in
> Su24 for CJI3 and update the program(RKPEP003).
>
>
>
> Thank you,
> Sonia
> On Thu, May 6, 2010 at 1:02 AM, anjan.pandey via sap-security <
> sap-security@groups.ittoolbox.com> wrote:
>
> > Posted by anjan.pandey
> > on May 6 at 1:01 AM
> > Hi Louis
> >
> > Program(RKPEP003) called by transaction CJI3 needs to be updated to have
> > authrization checks for object "K_REPO_OPA". Just enabling the SU24
> values
> > and importing the values in roles won't help.
> >
> > Note: As per SAP recommendation no SAP delivered program is supposed to
> be
> > changed. For any changes you can copy the existing program into a custom
> > program and apply your changes.
> >
> > Thanks.
> > Anjan Pandey
> >
> > On Thu, May 6, 2010 at 6:45 AM, Sonia via sap-security <
> > sap-security@groups.ittoolbox.com> wrote:
> >
> > > Posted by Sonia(Sap Basis and Securiy Analyst)
> > > on May 5 at 9:17 PM
> > > Louis,
> > >
> > > Did you change this object to "CM" in Su24 for CJI3.
> > >
> > > Thank you,
> > > Sonia
> > >
> > > On Wed, May 5, 2010 at 6:21 PM, LouisLau via sap-security <
> > > sap-security@groups.ittoolbox.com> wrote:
> > >
> > > > Posted by LouisLau(Mr.)
> > > > on May 5 at 6:19 PM
> > > > Hello all,
> > > >
> > > > With transaction SU24, I change the Check Indicator for transaction
> > CJI3,
> > >
> > > > Object K_REPO_OPA to 'Check' and Proposal to 'YS'; the values are
> > > populated
> > > > correctly in PFCG. However, the Object K_REPO_OPA is not validated at
>
> > > > execution time. What do I have to do to activate the check?
> > > >
> > > > Thank you in advance,
> > > > Louis
Copyright © 2010 Toolbox.com and message author.
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
SoniaSAP Security Enthusiast
Contributed 100 posts in a group to earn a Bronze Achievement
Related Content
In the Spotlight
White Papers
In the Spotlight
Toolbox.com for iPhone: Ask Questions & Get Answers Anywhere. Use the New iPhone App
View this thread online
Manage group e-mails
Create an FAQ on this topic
Tell us what you think
Unsubscribe from discussion
Manage group e-mails
Create an FAQ on this topic
Tell us what you think
Unsubscribe from discussion
_.____.__ 
