GRC 10 - Conflicts for ME23N & ME28

[Former Member]

Hi Guys,

I have a question...

In GRC 10 I came across access risk P059 which is associated with PR02 and PR04. I found out that ME23N is hitting S_TCODE auth object and ME28 is hitting M_EINK_FRG which has a value $. Is this a right set up? Would you recommend changing it to * instead? and what would be the solution for ME23N with S_TCODE?

Your suggestion will be highly appreciated.

Thanks

Syed

[kevin_tucholke1]

Syed:

Please review the following SAPNotes:  These notes will apply for either v5.3 or v10.0.

SAP Note 1050832 - ME23N in Compliance Calibrator (RAR)

Default rules

SAP Note 1133589 - CC5.X - How to build rules for "all" or "any" value.

Thanks,

Kevin

[koehntopp]

Syed,

you posted the exact same question in the security forum where it already was thoroughly answered. Please do not ask the same question in several spaces. Thank you.

Thread locked.

Frank.

SCN Moderator