06-18-2009 9:59 AM
Hi All,
One of my end user is accessing some Z tables which are not Client independant...,
So we removed S_TABU_CLI access with X value as per SOX. so he is not authorized to modify the Z tables now. Is there any other way to get authorized to modify those tables.
Thanks,
Noone
Edited by: pravin n on Jun 18, 2009 11:00 AM
06-18-2009 11:21 AM
pls ask your User to add MANDT field to the all Ztables and check after the modification.
06-18-2009 10:10 AM
Hi Pravin,
Did you checked the Su53 of the user when he failed for the Z table ?
Let me know what you find in the SU53 error screenshot.
Cheers !!
Zaheer
06-18-2009 10:25 AM
Authorization check failed
Object Class BC_A Basis: Administration
Authorization obj. S_TABU_CLI Cross-Client Table Maintenance
Authorization field CLIIDMAINT Indicator for cross-client maintenance
X
>3 User's Authorization Data QUILLD
>Object Class BC_A Basis: Administration
>Authorization object S_TABU_CLI Cross-Client Table Maintenance
>Authorizat. T-SC99090800 Cross-Client Table Maintenance
Profl. T-SC990908 Profile for Role XX000&TBL_ZADI
Role XX000&TBL_ZADI Tables for ADID
>Authorization field CLIIDMAINT Indicator for cross-client maintenance
' '
06-18-2009 10:37 AM
Check the Client Specific settings for the table via the table DD02V. S_TABU_CLI will only be checked for 'X' only if the table is a cross client table.
Cheers !!
Zaheer
06-18-2009 10:40 AM
Hi,
s_tabu_cli is required with (X) for maintaining cross client tables. At least there should be some fire fighting access or mitigation control to deal with these situations. A role should be there with the access which needs to be given to Fire fighter users (eg. One time authorizations)as a way of mitigation control.
Regards
Aveek.
06-18-2009 11:09 AM
here is the table DD02V .
TABNAME DDLANGUAGE TABCLASS CLIDEP DDTEXT
ZZADIDFTP C TRANSP ADID FTP Transfer Log
ZZADIDFTP E TRANSP ADID FTP Transfer Log
ZZADIDFTP F TRANSP FTP TRANSFER MANAGEMENT
ZZADIDFTP I TRANSP ADID FTP Transfer Log
ZZADIDFTP P TRANSP ADID FTP Transfer Log
ZZADIDFTP S TRANSP ADID FTP Transfer
06-18-2009 11:18 AM
Seems like CLIDEP is blank for all the Z tables which you have posted, if these are not cross client then 'X' should be there in the CLIDEP column.
Also, check the meta directory of the table, with SE12, check if the table has MANDT field in the table. Client dependent tables have this field.
Cheers !!
Zaheer Kazi
06-18-2009 1:47 PM
06-18-2009 2:40 PM
Hi Zaheer,
Could you please tell me how can we change a talbe from Client independent to client dependent.
And in my case I copuld not find any MANDT field with ANY Z talbes.
where can we find that MANDT field for Z tales.
Thanks,
Noone
06-18-2009 11:21 AM
pls ask your User to add MANDT field to the all Ztables and check after the modification.