Effect of "changed' objects during upgrades

[Former Member]

Hi Guru's,

I have never had a security upgrade experience. I just wanted to check the effect of objects which have status "changed" or "manual" for that matter.

I know that that when an object is moved to "changed", it loses its relationship with the tcode added through the menu. so when we delete the tcode, the changed object will not be removed. What impacts do these objects have during upgrades?

Thank you Appreciate your inputs

Abhishek

[Bernhard_SAP]

Hello Abishek,

after upgrade the necessary steps are performed in SU25.

After the new values have been applied to usobx_c and usobt_c (=SU24 values), the affected roles have to be updated with that values.

Technically su25 performs then the same as if you open each affected role in changemode->enter the profile with the option 'Read old status and merge with new data' (3rd option of teh 'Expert mode for Profile Generation'.

At this merge process the rules of [SAP Note 113290|https://service.sap.com/sap/support/notes/113290] are applicable. Now have a look at point B) Updating authorization data --> 3.Changed and manually

There you will find the answer.

b.rgds, Bernhard

[Former Member]

Hey Bernhard,

Thank you for this very valuable information and note.

In SU25, if the merge process is performed, "Read old status and merge with new data", for standard objects this will work as intended.

However, for changed objects, since the SU24 connection has broken from the menu tcode, this process will bring in another instance of the object with standard SU24 default values? Right ? If yes, then all changed objects will get replicated in an upgrade on this step?

Thanks in advance for your inputs

Abhishek

[Bernhard_SAP]

Hi Abhishek,

the changed authorizations will remain (dependent on the rules of #113290).... But there will be possibly some additional authorizations with status STANDARD inserted.

b.rgds, Bernhard

[Former Member]

Thank you Bernhard

Got it!