Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

E-Mail field on "Address" tab not editable in SU3

Former Member
0 Kudos

We were considering allowing end users to change their email address (stored on their user master record) via transaction SU3; however, in testing, even with SAP_ALL assigned, that field is not open for editing. We are using CUA, but that field is specified for local updating in our CUA settings. That field is available for editing from transaction SU01, so I believe the CUA settings are correct. Any idea why an end user is not able to update this field via SU3?

Many thanks.

- Jonathan Ruth

1 ACCEPTED SOLUTION

RainerKunert
Active Participant
0 Kudos

Hi,

if you change the email address in SU01, the address will be changed in the SAP office account, too. So the user may get access to mails, that was send to the "new" email address.

If the user is allowed to change his own email address, he can view emails of other users. This is a high security risk and therefore the change is forbidden.

8 REPLIES 8

0 Kudos

Soma -

It seems the info you sent me was all related to trusted RFC connections. This only contained vague references to SU3 and did not really address my question. Through some further research, however, we were able to find an answer. It seems that as of release 4.5+, SAP has removed the ability for a user to change their own email address in transaction SU3. See note 136186 if you're interested.

Thanks!

- Jonathan

0 Kudos

Hi,

Its true. But if u want to change the same do it via SU01.

Regards

RainerKunert
Active Participant
0 Kudos

Hi,

if you change the email address in SU01, the address will be changed in the SAP office account, too. So the user may get access to mails, that was send to the "new" email address.

If the user is allowed to change his own email address, he can view emails of other users. This is a high security risk and therefore the change is forbidden.

0 Kudos

All,

Is it possible to restrict transaction SU01 to allow ONLY the user data tab (including the personal email address field) to be modified? Also, do you happen to know which table contains the personal email address data for user master records? Investigating options for mass maintenance / modification of personal email addresses; any assistance/ ideas would be greatly appreciated.

Thanks & Regards,

Chuck Brooks

0 Kudos

Hi Chuck,

If none of the SU0, SU1 etc transactions do what you are looking for then you can create a transaction variant for SU01 and hide or make display only the tabs/screens that you don't want. This transaction variant (create in tx SHD0) can be assigned to a custom t-code which can be assigned to users to give this limited functionality. You will also need to be careful over the auth objects that you give for this too.

You can see email address in table ADR6 which you can link with ADRP on person number to give a bit more useful info.

0 Kudos

> You can see email address in table ADR6 which you can link with ADRP on person number to give a bit more useful info.

In addition to that, table USR21 links the username to the person number.

0 Kudos

Thanks, I forgot about USR21!