topic Re: Security Redesign Best Practices in Application Development and Automation Discussions

Security Redesign Best Practices

Former Member — Tue, 02 Jan 2007 23:01:45 GMT

Hi All:

I am working on security redesign project.

I request you to share any guidelines on role based redesign.

Thank you,

Re: Security Redesign Best Practices

manohar_kappala2 — Wed, 03 Jan 2007 04:53:22 GMT

Hi,

First of all Identify the key conflicts at the Tcode level.

Verify the tcodes combinations from S_TCODE level and identify the conflicts.

Then go into the details of the other Auth objects which give access for this conflict to materialise and if there are any then let the management know about this and mitigate it accordingly. For example SU01 with PFCG is a conflict but it would take effect if they are given Activities 01,02 and 06 for

Corresponding Auth Objects, this might not be a conflict of drastic proportions if the Activities are 03, 08 . Let me know if it helps

Re: Security Redesign Best Practices

Former Member — Thu, 01 Mar 2007 09:47:10 GMT

I explored the help.sap and service market place.

Re: Security Redesign Best Practices

Former Member — Thu, 01 Mar 2007 17:37:12 GMT

What did you found there?

post updates