topic Re: S_TABU_CLI in Application Development and Automation Discussions

S_TABU_CLI

Former Member — Thu, 18 Jun 2009 08:59:18 GMT

Hi All,

One of my end user is accessing some Z tables which are not Client independant...,

So we removed S_TABU_CLI access with X value as per SOX. so he is not authorized to modify the Z tables now. Is there any other way to get authorized to modify those tables.

Thanks,

Noone

Edited by: pravin n on Jun 18, 2009 11:00 AM

Re: S_TABU_CLI

Former Member — Thu, 18 Jun 2009 09:10:06 GMT

Hi Pravin,

Did you checked the Su53 of the user when he failed for the Z table ?

Let me know what you find in the SU53 error screenshot.

Cheers !!

Zaheer

Re: S_TABU_CLI

Former Member — Thu, 18 Jun 2009 09:25:30 GMT

Authorization check failed

Object Class BC_A Basis: Administration

Authorization obj. S_TABU_CLI Cross-Client Table Maintenance

Authorization field CLIIDMAINT Indicator for cross-client maintenance

>3 User's Authorization Data QUILLD

>Object Class BC_A Basis: Administration

>Authorization object S_TABU_CLI Cross-Client Table Maintenance

>Authorizat. T-SC99090800 Cross-Client Table Maintenance

Profl. T-SC990908 Profile for Role XX000&TBL_ZADI

Role XX000&TBL_ZADI Tables for ADID

>Authorization field CLIIDMAINT Indicator for cross-client maintenance

' '

Re: S_TABU_CLI

Former Member — Thu, 18 Jun 2009 09:37:30 GMT

Check the Client Specific settings for the table via the table DD02V. S_TABU_CLI will only be checked for 'X' only if the table is a cross client table.

Cheers !!

Zaheer

Re: S_TABU_CLI

Former Member — Thu, 18 Jun 2009 09:40:38 GMT

Hi,

s_tabu_cli is required with (X) for maintaining cross client tables. At least there should be some fire fighting access or mitigation control to deal with these situations. A role should be there with the access which needs to be given to Fire fighter users (eg. One time authorizations)as a way of mitigation control.

Regards

Aveek.

Re: S_TABU_CLI

Former Member — Thu, 18 Jun 2009 10:09:59 GMT

here is the table DD02V .

TABNAME DDLANGUAGE TABCLASS CLIDEP DDTEXT

ZZADIDFTP C TRANSP ADID FTP Transfer Log

ZZADIDFTP E TRANSP ADID FTP Transfer Log

ZZADIDFTP F TRANSP FTP TRANSFER MANAGEMENT

ZZADIDFTP I TRANSP ADID FTP Transfer Log

ZZADIDFTP P TRANSP ADID FTP Transfer Log

ZZADIDFTP S TRANSP ADID FTP Transfer

Re: S_TABU_CLI

Former Member — Thu, 18 Jun 2009 10:18:35 GMT

Seems like CLIDEP is blank for all the Z tables which you have posted, if these are not cross client then 'X' should be there in the CLIDEP column.

Also, check the meta directory of the table, with SE12, check if the table has MANDT field in the table. Client dependent tables have this field.

Cheers !!

Zaheer Kazi

Re: S_TABU_CLI

Former Member — Thu, 18 Jun 2009 10:21:50 GMT

pls ask your User to add MANDT field to the all Ztables and check after the modification.

Re: S_TABU_CLI

Former Member — Thu, 18 Jun 2009 12:47:08 GMT

Hi,

How can we change the table client independent to client dependent.

Re: S_TABU_CLI

Former Member — Thu, 18 Jun 2009 13:40:05 GMT

Hi Zaheer,

Could you please tell me how can we change a talbe from Client independent to client dependent.

And in my case I copuld not find any MANDT field with ANY Z talbes.

where can we find that MANDT field for Z tales.

Thanks,

Noone