topic Authorization objects in PFCG in Application Development and Automation Discussions

Authorization objects in PFCG

Former Member — Wed, 08 Apr 2009 09:10:22 GMT

Hi,

1) When trying to maintain authorization objects post upgrade in the roles, there is a notation which i gues tells about the type of auth object introduced. For eg:

Maintained Old/New/Updated

Standard Old/New/Updated

Changed New etc

Can anybody tell what this means? and is there any standard approach while maintaining these?

2) I read somewhere that its best to download the tables USOBX,USOBx_C, USOBT and USOBT_C before and after refresh. Whats is the significance of this step? i see that the values in these tables are too many to be able to download.

Any help on this would be appreciated.

Thanks,

Abhijit

Re: Authorization objects in PFCG

Former Member — Wed, 08 Apr 2009 09:33:13 GMT


> 1) When trying to maintain authorization objects post upgrade in the roles, there is a notation which i gues tells about the type of auth object introduced. For eg:
> 
> Maintained Old/New/Updated
> Standard Old/New/Updated
> Changed New etc
>

Standard -

> Standard SAP auth. object pulled in because of addition of a tcode in menu. No Manual chnages made.

Maintained -

> Field values maintained for the auth. objects for open field values.

Changed -

> Field values of Std. Auth. objects Changed (ones for which the field values are already present)

old -

> Auth. Object corresponds to an earlier change to the role (current addition of Tcodes etc ... haven't affected these objects)

New -

> Auth. object has been pulled in because of a new addition to the menu. (same Auth. Object did not exist previously)

Updated -

> Auth. Object existed earlier but the Field values have been changed because of the new Tcode in the Menu.

Hope I have made this clear.

Experts: Be kind enough to correct if anything is wrong in this.

Regards,

Partha.

Re: Authorization objects in PFCG

Former Member — Wed, 08 Apr 2009 09:41:06 GMT

Hi,

I suggest you go through the SAP note 113290.[https://websmp230.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=113290]

This will surely clear most of your doubts.

Regards,

Subbu

Edited by: Subramaniam Iyer on Apr 8, 2009 11:41 AM

Edited by: Subramaniam Iyer on Apr 8, 2009 11:42 AM

Re: Authorization objects in PFCG

Former Member — Wed, 08 Apr 2009 10:03:32 GMT

Thanks Partha and Subbu for the info!!!!

Sorry my second question was a little confusing....i meant after upgrade and not after refresh. Am posting it again

2) I read somewhere that its best to download the tables USOBX,USOBx_C, USOBT and USOBT_C before and after UPGRADE. Whats is the significance of this step? i see that the values in these tables are too many to be able to download.

Re: Authorization objects in PFCG

jurjen_heeck — Wed, 08 Apr 2009 10:21:32 GMT

> i see that the values in these tables are too many to be able to download.

This one I do not get. What do you mean too many?

Re: Authorization objects in PFCG

Former Member — Wed, 08 Apr 2009 10:29:58 GMT

Hi Jurjen,

Each table has more than 500,000 entries in it. I can download it but i just want to understand the significance of this activity.

Thanks Abhijit

Re: Authorization objects in PFCG

jurjen_heeck — Wed, 08 Apr 2009 10:33:49 GMT

I could be a kind of backup facility so you can restore your settings if something turns out to be wrong.

Firstly, no real need to download the SAP tables, so just concentrate on the USOB*C tables.

Secondly, 500.000 entries should not provide any problems to download.

You can however try to select changed records only, just have a look at the records that were changed by anone but SAP and/or after the initial filling of the customer tables at install or previous upgrade.