Solved: Write protect authorization tables

koolspy_ultimate · ‎10-21-2013

Hi all,

I would like to know, why usr04, ust04, usrbf2 tables are not write protected? as we can insert values regarding authorization directly into these tables.

Please share your valuable suggestions.

Dear moderators am sorry for my earlier post, but my main reason for posting that code is to know why sap allows important tables are not write protected.

Thanks in advance,

Madhumahesh.

matt · ‎10-21-2013

Asking why SAP do anything implies that there is always a sound technical reason. Probably with this one the real reason is "it seemed like a good idea at the time". Or, even more likely "it didn't occur to anyone they would need protecting".

Anyone using a program like the one you published, would, if caught, be rapidly out of a job. There are a number of security and audit logs that might well pick up the usage of such a program.

Anyway - this discussion is in the wrong place. So I'll move it to security.

former_member201275 · ‎10-21-2013

https://scn.sap.com/thread/1320190

matt · ‎10-21-2013

Asking why SAP do anything implies that there is always a sound technical reason. Probably with this one the real reason is "it seemed like a good idea at the time". Or, even more likely "it didn't occur to anyone they would need protecting".

Anyone using a program like the one you published, would, if caught, be rapidly out of a job. There are a number of security and audit logs that might well pick up the usage of such a program.

Anyway - this discussion is in the wrong place. So I'll move it to security.

koolspy_ultimate · ‎10-22-2013

Thankyou.