topic Re: RE: Security actions during system refresh in Application Development and Automation Discussions

RE: Security actions during system refresh

Sri_S1 — Thu, 15 Apr 2010 17:12:14 GMT

Hi all,

i wanted to know the Security actions during system refresh.

we recently made system refresh from Prod to Quality, after refresh the user had different roles than before.

so i dont know what happend during refresh. i wanted to know how should one proceed on security strategy while doing system refresh.

as far as i know, we export some user related tables in to some folder and then import them after refresh, let me know if am wrong. also let me know what are the tables we can export and import.

note: we disconnected CUA when doing system refresh and connected back once the refresh is done.

thanks in advance,

Edited by: sun on Apr 15, 2010 7:12 PM

Re: RE: Security actions during system refresh

Former Member — Thu, 15 Apr 2010 18:11:16 GMT

Are these your PacMan "best score" users on a Commodore 64 system? Please provide more details...

Anyway, the "basis" folks should have a "to do list" for system refreshes. Review that for security relevant tasks, and it's existence.

Cheers,

Julius

Re: RE: Security actions during system refresh

Sri_S1 — Thu, 15 Apr 2010 19:10:30 GMT

Julius,

ok, recently we made system refresh from Prod to Quality. the problem is that users are missing some roles that they had before.

for me what i wanted to know is when doing system refresh, what are the secuity realted tables that should not be modified (for EX like USR02) and normally i think basis people export this table before refresh and again after refresh they will replace or import the table. is that correct?

Thanks for your suggestion, i will contact basis guys to see what they can provide.

Thanks,

Edited by: sun on Apr 15, 2010 9:10 PM

Re: RE: Security actions during system refresh

Former Member — Thu, 15 Apr 2010 19:20:21 GMT

Keep us informed and also let us know which type of system it is..

Cheers,

Julius

Re: RE: Security actions during system refresh

Former Member — Thu, 15 Apr 2010 19:55:08 GMT

Please take backup of firefighters during system refresh.

Re: RE: Security actions during system refresh

Sri_S1 — Thu, 15 Apr 2010 21:33:55 GMT

Hi Baskar,

Thanks for your input, i will keep this open to see more feedbacks and suggesstions.

Keep you updated, if i find something.

thanks,

Re: RE: Security actions during system refresh

Former Member — Thu, 15 Apr 2010 22:02:53 GMT

Transaction SPAM will help us further to see what might be available, if configured and used...

Sorry for the irony

Cheers,

Julius

Re: RE: Security actions during system refresh

Former Member — Thu, 15 Apr 2010 22:18:50 GMT


> Please take backup of firefighters during system refresh.

Good comment, perhaps after the anonymization programs...

Cheers,

Julius

Re: RE: Security actions during system refresh

Former Member — Fri, 16 Apr 2010 03:27:48 GMT

- back up of Customized t-codes, tables auth. objects, fields, programs and Roles of Test system, which are requierd , but are still not in Prod.

- transport the customized t-codes, tables auth. objects, fields and programs first before transporting Roles

- no need to transport users

Re: RE: Security actions during system refresh

Sri_S1 — Fri, 16 Apr 2010 13:07:08 GMT

Thanks Julius,

Thanks

Re: RE: Security actions during system refresh

Sri_S1 — Fri, 16 Apr 2010 13:07:47 GMT

Thanks a lot Plaban,

Thanks,

Re: RE: Security actions during system refresh

Former Member — Fri, 16 Apr 2010 14:02:34 GMT

I was just invlovled in a Quality refresh , and had experienced the same. before making the refresh, the team needs to export the user master records in SCC8 and reimport it when refresh is done.

When checked, found 3 months old data in one of restored system and 1 year old in another one, and its been pointed to restore team to fix.

Later on they imported right ones Just got lucky and saved lot of time.

Regards,

Gowrinadh

Re: RE: Security actions during system refresh

Former Member — Fri, 16 Apr 2010 19:48:15 GMT

I think I am missing something, during QAS refresh say client copy is with Production; users will get same roles as what they have in production correct? as QAS being new copy.

- In our landscape most of the Contractors are not given PRD access, so with refresh all contractors are deleted and there accounts have to re-create...what a mess! and existing users get roles as PRD even though they need more access on QAS vs PRD.

Is there anything we can do to avoid this manual step/

Thanks.

Re: RE: Security actions during system refresh

Former Member — Fri, 16 Apr 2010 22:30:59 GMT


> I think I am missing something, during QAS refresh say client copy is with Production; users will get same roles as what they have in production correct? as QAS being new copy.

Not on his case due to CUA.

Re: RE: Security actions during system refresh

Former Member — Sat, 17 Apr 2010 07:15:14 GMT

This is the first thing to discuss when performing refresh. The data should be as of production, not the user master data.

From your posts, it has been understood that user masters were not backed up properly and restored. Only option I can see in your case is to restore the user master records from last successful back of QAS( before refresh) if any exists.

Regards,

Gowrinadh

Re: RE: Security actions during system refresh

Sri_S1 — Sat, 17 Apr 2010 13:54:35 GMT

Ok Thanks Gowrinadh