topic Auth Objects edition in Application Development and Automation Discussions

Auth Objects edition

Former Member — Mon, 14 Jan 2008 19:01:08 GMT

I have the following questions on the authorization objects:

1.I am to remove an Auth object from about 30 odd roles , some of which are Composite roles. My question is ;

1.Is there a way to do this in one shot ? rather than getting into each role one by one ?

2.What will be the impact onthe composite...which is agian a collection of Sngle Roles.

3. I prefer just to" inactivate' the object than delete/remove it , what are your thoughts ?

Thanks

Re: Auth Objects edition

jurjen_heeck — Mon, 14 Jan 2008 19:39:57 GMT

> 1.Is there a way to do this in one shot ? rather than getting into each role one by one ?

Unfortunately not. There are some threads in the forum about directly editing tables AGR_1250 and AGR_1251, but for 'only' 30 roles I'd do it manually.

> 2.What will be the impact onthe composite...which is agian a collection of Sngle Roles.

Composites themselves do not contain authorization objects, so there should not be any impact. After editing the singles you don't even need to transport the composites again.

> 3. I prefer just to" inactivate' the object than delete/remove it , what are your thoughts ?

Disadvantage is accumulation of 'mess'. Advantage is the ability to internally document why the object was disabled. Just doubleclick on the object name in PFCG and edit the title.

HTH

Jurjen

Re: Auth Objects edition

Former Member — Mon, 14 Jan 2008 21:19:56 GMT

Agree with you. I prefer to inactivate it . but here again even if I delete it , the changes will be caprtured in SUIM so now really th echoce is where does one wnat the mess!! in PFCG or SUIM !..No wI prefer SUIM to hol dthe mess though !

Thnx

Re: Auth Objects edition

Former Member — Tue, 15 Jan 2008 15:19:01 GMT

The reason behind the inacivation is also because somewhere in this forum I recall " teachers" mentioing that if not inactivated there are chances that the PFCG may load up the profile having the original comparisons even if an user compare is done. thans

Re: Auth Objects edition

jurjen_heeck — Tue, 15 Jan 2008 15:31:11 GMT

PFCG only fiddles with the objects if transactions are added/deleted to or from the role menu. Under some circumstances it seems that deactivating objects rather than deleting them prevents PFCG from re-adding them.

Haveing the deactevated object in your role can give you a clue what to do with a new one if it (re)appears.....

YMMV

Jurjen

Re: Auth Objects edition

Former Member — Wed, 16 Jan 2008 11:19:33 GMT

Hi,

you can use SU24 for modifying the auth. objs. in this case, you can deactivate the auth obj, instead of deleting it.

Re: Auth Objects edition

Former Member — Wed, 16 Jan 2008 17:54:08 GMT

Jurgen,

What does YMMV mean ? is it a new tcode that answers all your questions !!

Re: Auth Objects edition

jurjen_heeck — Wed, 16 Jan 2008 17:57:38 GMT

> What does YMMV mean ? is it a new tcode that answers all your questions !!

It's actually newsgroup/message board slang and stands for: "Your Mileage May Vary" as in miles to the gallon for your car.

The results I got in my situation may be different in yours.

Cheers

Jurjen