topic Re: Password lock, but different rules for different users in Application Development and Automation Discussions

Password lock, but different rules for different users

molakalasasikan — Wed, 25 Nov 2009 15:27:08 GMT

UserID should get locked if login fails for X number of times. there must also be a global setting in addition to individual setting. Allow some groups of accounts to be locked only when he fails for 10 times, but generally for all others itu2019s 3 times, i.e. 3 attempts is the default and it can be overridden. Can someone suggest ?

Edited by: SasikanthReddy M on Nov 25, 2009 4:27 PM

Edited by: Julius Bussche on Nov 25, 2009 4:46 PM

Please use meaningfull subject titles

Re: Password lock, but different rules for different users

Former Member — Wed, 25 Nov 2009 19:51:41 GMT

This is not practlcal without customisation.

What is the logic behind the requirement? It makes no sense to me.

Re: Password lock, but different rules for different users

Former Member — Tue, 08 Dec 2009 14:19:58 GMT

There was discussion about this once before and the idea that the password policies should be client specific groups of configuration which can then be assigned to a user (also client dependent) according to their user group or some other attribute.

The user type already drives some of the behaviour and in a selected few you can define an exception, but they are all global for all users in clients because the RZ10 params are independent as well.

Optionally transportable customizing which overrides the instance param could be an imaginable solution for this and there seems to be some demand for it, so if you wish to you can add this to our [Security Functionality Wishlist|http://wiki.sdn.sap.com/wiki/display/Security/SecurityFunctionalityWishlist-Topics] in the wiki to gather support.

Cheers,

Julius