Access Control rule set integrity

[former_member274402]

Hi,

I have a question regarding the rule sets. We do continue
changes on our rule sets as business risk services. We have found that we can
transport the rule set through transaction GRAC_RULE_TRANSPORT but have found
that this takes through the complete rule set. We are also aware that these
rules can be uploaded and downloaded directly in production.

My question what is the correct way in doing rule set maintenance
and what will be audit accepted.

Please let me know your feeling around this and any
practical ways you guys implemented will be appreciated.

Thanks, Mel Button

[neerajmanocha]

Hi Melvin,

There is no way, you can just move the DELTA part of rules update from one system to your production server. Best practices would be, move the entire set everytime using GRAC_RULE_TRANSPORT.

Everytime, you will be having a new transport request with entire rules (existing + new update/delta).

By this, you can also have Transports list which can be used anytime later (used as versioning) to revert the changes.

Hope this helps.

Thanks & Regards

Neeraj