topic Re: Does copying another user's access transition their developer key? in Application Development and Automation Discussions

Does copying another user's access transition their developer key?

Former Member — Wed, 20 Aug 2014 20:58:18 GMT

Can a user obtain access to a developer key by copying another user's access? This question is for both developer keys in the development and production environments.

Re: Does copying another user's access transition their developer key?

Former Member — Thu, 21 Aug 2014 04:28:33 GMT

Hi Steve,

access keys must be generated on http://service.sap.com/SSCR and will only be correct for the user they are generated for. To copy an entry in table DEVACCESS will lead to an invalid entry.

Regards,

Klaus

Re: Does copying another user's access transition their developer key?

Former Member — Thu, 21 Aug 2014 04:40:06 GMT

Hi Steve,

here an additional information.

Within the same system line the developer key will be identical on DEV, QA and PROD systems, if

the username is identical
the systems have identical SAP releases

And the developer key in table DEVACCESS is client independent. This means, if user MILLER is registered with access key in client 100, automatically user MILLER in client 200 has the same developer key and is automatically registered too.

Although this might be different users, they will have the same access key.

Regards,

Klaus

Re: Does copying another user's access transition their developer key?

Former Member — Thu, 21 Aug 2014 23:14:57 GMT

Thank you for the clarification. How do you determine whether its client independent or client dependent?

Re: Does copying another user's access transition their developer key?

Former Member — Fri, 22 Aug 2014 04:32:11 GMT

Hi Steve,

sorry, I'm not sure that I've got your question. Developer key is always client independent in a system for an identical user name.

If you have different developers with identical names in different clients, they would have the same developer access key (If it is the same developer in different clients, this is okay),

So you have to check that user MILLER in client 100 is the same as user MILLER in client 200. If it is not, then just give him another user name like MILLER2. That's manual doing.

But normally you have this issue only on DEV systems. We don't give full developer rights to users on QA and PROD systems (except some emergency users).

Regards,

Klaus