topic Re: Modify security Profiles in Application Development and Automation Discussions

Modify security Profiles

Former Member — Tue, 18 Dec 2007 16:46:24 GMT

I would like to add some objects to the SAP_ALL profile. This may not be recommended (am aware of that). Is it possible to do this in the first place? If so How?

ravi

Re: Modify security Profiles

Former Member — Tue, 18 Dec 2007 17:17:02 GMT

Hi Ravi,

Have you thought about making a copy of SAP_ALL and making modifications to that? If up update SAP_ALL, then your changes might be lost when Support Packages are applied.

Hope that helps.

J. Haynes

Denver

Re: Modify security Profiles

Former Member — Tue, 18 Dec 2007 17:23:16 GMT

Thanks for your quick response. I have that in mind however I am not sure about how exactly the SAP_ALL profile should be edited. Could you suggest on that.

Ravi

Re: Modify security Profiles

Former Member — Tue, 18 Dec 2007 17:39:17 GMT

You should be able to do this in SU02. To make a copy of a profile, enter the profile work area and select 'Utilities' - 'Copy' from the menus.

Is that what you need?

Re: Modify security Profiles

Former Member — Tue, 18 Dec 2007 18:02:06 GMT

If you just want to add custom objects to SAP_ALL then you might want to think about setting the following parameter in table PRGN_CUST (via SM30)

ADD_ALL_CUST_OBJECTS = YES

Program RSUSR406 should also update SAP_ALL with custom objects

Re: Modify security Profiles

Former Member — Fri, 21 Dec 2007 10:17:39 GMT

The simplest solution is to copy the SAP_ALL profile and then modify according to the requirement.

Re: Modify security Profiles

Former Member — Fri, 21 Dec 2007 11:16:44 GMT

> The simplest solution is to copy the SAP_ALL profile and then modify according to the requirement.

Not necessarily. It makes sense for SAP_ALL to have all auth objects you have in your system. In this case there is a standard SAP method for achieving this. You can even force it to pull in S_RFCACL is you want to.