This website is not affiliated with, sponsored by, or approved by SAP AG.

structural profil not secured SQ01

SAP Security

Moderators: Snowy, thx4allthefish, jurjen

structural profil not secured SQ01

Postby HumphreyBogart » Wed Dec 28, 2011 5:26 am

Hello gurus,

Could you tell me if there is a difference with authorizations betwen S_PH0_48000513 and SQ01 (ADHOC QUERY). ??
I've heard that there is a big problem with structural profil (if OM implemented).
And a consulting company says that SQ01 and SQVI doesn't respect structural profils.


Thank you for your answser
HumphreyBogart
 
Posts: 14
Joined: Tue Dec 13, 2011 2:02 am

Re: structural profil not secured SQ01

Postby jurjen » Wed Dec 28, 2011 6:26 am

The consulting company is right.
Structural authorization checks are implemented only in the HCM part of SAP. SAP query is a generic tool that ignores them. This is not a bug.

Jurjen
jurjen
 
Posts: 298
Joined: Wed May 17, 2006 8:17 am
Location: The Netherlands

Re: structural profil not secured SQ01

Postby HumphreyBogart » Wed Dec 28, 2011 6:39 am

Thanks !!!

And no difference between S_PH0_48000513 and SQ01 for structural authorizations ?
HumphreyBogart
 
Posts: 14
Joined: Tue Dec 13, 2011 2:02 am

Re: structural profil not secured SQ01

Postby Al. » Fri Dec 30, 2011 1:46 am

Maybe one of our HR experts will confirm or correct this but in the back of my mind I have a feeling that an SQ01 query based on an LDB (e.g. PNP) will respect structural auths if P_ABAP is appropriately restricted.
http://www.turnkeyconsulting.com/
Al.
 
Posts: 3050
Joined: Tue Feb 25, 2003 5:35 am
Location: London


Return to SAP Security

Who is online

Users browsing this forum: No registered users and 7 guests





loading...


This website is not affiliated with, sponsored by, or approved by SAP AG.