This website is not affiliated with, sponsored by, or approved by SAP AG.

Changes pulled prematurely into PRD

SAP Security

Moderators: Snowy, thx4allthefish, jurjen

Changes pulled prematurely into PRD

Postby khatcher » Thu Oct 06, 2011 5:06 am

The problem is that when the agreed upon security transport goes into Production, it includes the changes that are in the transport that should follow. Here is my process:

1. A defect or issue or change control is presented.
2. It is then analyze what the issue is
3. Then this is reported to management and when approved and given a date for this to be imported into Production work begins.
4. Security then begins the required modifications in the test area DEV 300. There are 3 security staff members.
5. Once this works to satisfaction and result is approved by business unit, the security team working on that issue brings it to managements attention. Mngnt must approve of the setting up in DEV 100.
6. Then once approved and the unit test in DEV 300 passed, its changes are manually recreated in DEV 100.
6. Then changes are placed in transport.
7. The transport then moves the normal flow of DEV(100 -500) to QAS (100 - 400) and finally to PRD. Our company organizes time slots of when transports can go into PRD so items quickly move from DEV 100 to QAS and then wait until the slotted time to go into production. The transports do go into PRD in the order they were created in DEV100.
khatcher
 
Posts: 2
Joined: Wed Apr 07, 2010 7:08 am

Re: Changes pulled prematurely into PRD

Postby jurjen » Thu Oct 06, 2011 6:37 am

Can you please explain how and why this is a security-issue (other than the content of the transport requests)?
jurjen
 
Posts: 298
Joined: Wed May 17, 2006 8:17 am
Location: The Netherlands

Re: Changes pulled prematurely into PRD

Postby os » Thu Oct 06, 2011 12:26 pm

Much too complicated and error prone.

My 2 cents.
os
 
Posts: 469
Joined: Wed Dec 21, 2005 10:51 am

Re: Changes pulled prematurely into PRD

Postby henrik » Thu Oct 06, 2011 2:07 pm

And what was the question again?
www.turnkeyconsulting.com.au
henrik
 
Posts: 493
Joined: Wed Oct 23, 2002 6:38 am
Location: London, UK


Return to SAP Security

Who is online

Users browsing this forum: No registered users and 5 guests





loading...


This website is not affiliated with, sponsored by, or approved by SAP AG.