This website is not affiliated with, sponsored by, or approved by SAP AG.

Not able to change whatever parameter values in SU3 (how?)

SAP Security

Moderators: Snowy, thx4allthefish, jurjen

Not able to change whatever parameter values in SU3 (how?)

Postby win0sap » Tue Oct 16, 2012 3:54 am

Dear Professionals,

Nowadays, it is feasible for users to change all the parameter value using SU3. Regarding this, we'd like to limit the changes to some parameters only. For example, users should only be able to change the value of parameters which are created by us (i.e. starting with letter "Z"). For example, can it be implemented using any authorization objects? Please advise and thanks!!

win0sap
win0sap
 
Posts: 19
Joined: Thu Aug 23, 2012 8:24 pm

Re: Not able to change whatever parameter values in SU3 (how?)

Postby thx4allthefish » Tue Oct 16, 2012 4:25 am

Not in SAP Standard, as far as I am aware. You'd have to code this yourself.
curiousorange wrote:I give up. Humanity isn't worth saving. Why is there never a Vogon Constructor Fleet around when you really need one?
thx4allthefish
 
Posts: 5694
Joined: Sat Oct 26, 2002 6:18 pm
Location: barolo barrel

Re: Not able to change whatever parameter values in SU3 (how?)

Postby win0sap » Tue Oct 16, 2012 10:54 pm

Dear thx4allthefish,

Thanks for your reply. Do you mean that I have to implement the checking in User Exit? Any idea on which User Exit I should update? Many thanks!!

win0sap
win0sap
 
Posts: 19
Joined: Thu Aug 23, 2012 8:24 pm

Re: Not able to change whatever parameter values in SU3 (how?)

Postby Gary Morris » Wed Oct 17, 2012 4:49 pm

Probably a ZSU3 that enforces custom Z authorization objects on existing parameters, not an ABAP programmer but the idea of zparameters does not make sense to me. This seems like overkill. You could also do a query on usermaster with certain values in their parameters and remove the ones you are concerned about. I would think that the specific parameters you are trying to protect would be rare.
Gary Morris
SAP Security Consultant
garydavidmorris@gmail.com
Gary Morris
 
Posts: 399
Joined: Sun Oct 20, 2002 10:42 pm
Location: San Antonio, Texas


Return to SAP Security

Who is online

Users browsing this forum: Exabot [Bot] and 1 guest





loading...


This website is not affiliated with, sponsored by, or approved by SAP AG.