topic Re: Auth-Group SS in Application Development and Automation Discussions

Auth-Group SS

Former Member — Mon, 29 Sep 2008 08:42:13 GMT

Hello All ,

May i know the impact if we give the below object

s_tabu_dis

with change activity to auth-group SS

Re: Auth-Group SS

jurjen_heeck — Mon, 29 Sep 2008 08:45:58 GMT


> Hello All ,
> 
> May i know the impact if we give the below object
> 
> s_tabu_dis 
> with change activity to auth-group SS

The impact will be that someone with the proper transaction/program access will be able to change table contents of tables within that group. Impact may vary based on client role and settings.

Re: Auth-Group SS

Former Member — Mon, 29 Sep 2008 08:54:50 GMT

Hello ,

How can i know what all tables come under this Group SS .

Re: Auth-Group SS

Former Member — Mon, 29 Sep 2008 08:56:03 GMT

S_TABU_DIS is authorization object used for table maintanance(SM30).

by giving the authorization which you mentioned the user will have authorization to change the records of all tables whose authorization group is SS.

Re: Auth-Group SS

jurjen_heeck — Mon, 29 Sep 2008 09:18:31 GMT

> How can i know what all tables come under this Group SS .

Browse table TDDAT where CCLASS = SS.

Re: Auth-Group SS

Former Member — Mon, 29 Sep 2008 09:21:29 GMT

Hi,

If you have given the auth. group SS with change activity , then user will be able to change some tables. The assignment of authorization group and tables is shown in TDDAT table.

Regards,

Sneha

Re: Auth-Group SS

Former Member — Mon, 29 Sep 2008 16:27:38 GMT

Jurjen.... your voice echoes

Re: Auth-Group SS

jurjen_heeck — Mon, 29 Sep 2008 17:56:06 GMT


> Jurjen.... your voice echoes

And with the lack of new information, it sounds so hollow..... spooky!

Re: Auth-Group SS

Former Member — Wed, 01 Oct 2008 17:27:13 GMT

Probably the biggest risk here is that table auth group is the SAP default group for table T000 - so if that has not been changed the user with this access plus tcode SM30 would be able to open / close your client.

Re: Auth-Group SS

Former Member — Thu, 02 Oct 2008 10:11:31 GMT

Right said! Biggest risk!

SS class of table are all basis critical and can create havoc in the system if anyone plays around!

Rgds

Deepa

Re: Auth-Group SS

Former Member — Thu, 02 Oct 2008 13:25:07 GMT

This is what I would do.

Go to TDDAT, put SS in for CCLASS to see a list of all tables in the SS group. The technical names can be cryptic and you probably will recognize few tables by technical name.

Take the table list from SS, go to table DD02V. Put the SS table list in the TABNAME field and then look at the DDTEXT field on the output. This will give you the text description of each table in the SS group which should provide more info on the nature of the data protected by SS. You will then have more info to determine if your proposed change is appropriate.

I don't know what table you are enquiring about protecting with SS, however, I would expect that after seeing the text descriptions for the tables in SS, you probably won't want to make the change.