- SAP Community
- Products and Technology
- Additional Q&A
- Deletion of FF Logs
- Subscribe to RSS Feed
- Mark Question as New
- Mark Question as Read
- Bookmark
- Subscribe
- Printer Friendly Page
- Report Inappropriate Content
Deletion of FF Logs
- Subscribe to RSS Feed
- Mark Question as New
- Mark Question as Read
- Bookmark
- Subscribe
- Printer Friendly Page
- Report Inappropriate Content
on 03-23-2012 3:26 PM
Hi Experts,
It may be a very generic question, but this was put forward to us by the audit team.
Can a firefighter with SAP_ALL access , delete his own change logs for e.g by utilizing debugger function or any other way.
Thanks
Accepted Solutions (0)
Answers (2)
Answers (2)
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Report Inappropriate Content
Hello,
We've discussed this topic earlier. Kindly refer to http://scn.sap.com/thread/2118500
Cheers!
Diego.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
koehntopp
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Report Inappropriate Content
Hi "Security Team",
SAP_ALL rules the box - Firefighter is not supposed to prevent that, just to act as a control for functional SoD issues. And yes, your Admin can also unlock SAP* and copy the database.
Firefighter is a tool to document conscious SoD violations in business processes and make them transparent and impose dual control.
So, yes. Don't give a Firefighter SAP_ALL. Ever.
Frank.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
- Group Reporting Rule Based COI - TP calculation in Financial Management Q&A
- Group Reporting Rule Based COI - TP calculation in Technology Q&A
- How to record the class not to delete the item from the learning plan? in Human Capital Management Q&A
- How to improve the ADT Class Runner with additional Features in Technology Blogs by Members
- Mass Purchase Requisition deletion using transaction - MASS by adding deletion indicator field in Enterprise Resource Planning Blogs by Members
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.