topic Re: Authorization problems after transporting role in Application Development and Automation Discussions

Authorization problems after transporting role

former_member542460 — Tue, 08 Mar 2016 15:06:32 GMT

Good day, gurus.

I'm facing an issue after transporting a role to PRD system. Role tuning was performed in QAS system and it was required to give specific authorization to "store location (LGORT)" and "plant (WERKS)" (by auth.obj M_MSEG_LGO). It worked fine in QAS system, but it is not working in PRD as expected (its is allowing access to several store locations, not only the required store location). I have already performed role comparison from SUIM TX and it didn't show any difference. So I decided to create a test user and assigned it the role in both QAS and PRD system without any parameters or profiles, but it is showing the same behaviour (works fine in QAS, but it allows user actions on different store location in PRD).

Could you please give me any recommendation for facing this issue?

Thank you in advance,

Re: Authorization problems after transporting role

Colleen — Tue, 08 Mar 2016 22:22:36 GMT

Hi David

Have you asked your Functional team member if they have any configuration to transport to Production to activate this object?

Refer to thread:

http://scn.sap.com/thread/1888498

Regards

Colleen

P.S test user in Production?

Re: Authorization problems after transporting role

Bernhard_SAP — Wed, 09 Mar 2016 13:25:30 GMT

ST01/stauthtrace is your friend to identify differences reg. authority-checks......

Pls compare also your SU24 settings between systems....

b.rgds, Bernhard