Announcement:
wanna exchange links? contact me at sapchatroom@gmail.com.
Posted by
Admin at
Tcode: SMX
sonia
On Thu, Sep 9, 2010 at 4:15 AM, douwez via sap-security <
sap-security@groups.ittoolbox.com> wrote:
> Posted by douwez(Senior consultant)
> on Sep 9 at 5:16 AM Hi,
>
> A user with SM37 with only LIST (spool requests), PROT (for logs) and SHOW
> (job data) on S_BTCH_JOB, no authorization on S_BTCH_ADM and S_BTCH_NAM is
> harmless. He is only able to view. But than he is not able to release his
> own background jobs. Scheduling of own jobs is not protected.
>
> A possible way to work:
> - Endusers only have RELE authorizations for S_BTCH_JOB (no SM37);
> - First line support only has access to SM37 with display on S_BTCH_JOB;
> - Systemadmin has extensive authorization on S_BTCH_*.
> When ever a user wants to know the staus of a job he just has to call
> Firstline support.
>
> Kind Regards,
>
> Douwe Zijlstra
>
> ---------------Original Message---------------
> From: cmpt1980
> Sent: Tuesday, August 10, 2010 12:35 PM
> Subject: Alternative way or a transaction different than SM37 to display
> other user's Jobs status and Job Logs
>
> > Hello All,
> >
> > First of all, thanks a lot for your time.
> >
> > We're being asked by the Audit Team to remove tcode SM37 from our Job
> Roles. Although I agree with them that users should not have "change" or
> broad display access for the tcode, some of them need to check other user's
> Jobs status, as well as their Job Logs (which I have managed to restrict
> using auth. object S_BTCH_JOB).
> >
> > My question is: do you know if there's any alternative way or a
> transaction different than SM37 to display other user's Jobs status and Job
> Logs?
> >
> > We're providing SMX for user's own jobs, but I have not been able to find
> an alternative way than using a restricted version of SM37 for displaying
> other people's Jobs status and Job Logs.
> >
> > Best regards,
> >
> > CMPT
| __.____._ Copyright © 2010 Toolbox.com and message author.
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
| |  Sonia
SAP Security Enthusiast
Contributed 100 posts in a group to earn a Bronze Achievement _.____.__ |
Mark as helpful
