CDHDR table vs BKPF table

[Former Member]

Hello all,

I would like to analyze the activities performed in SAP in order to indetify access-rights conflicts by users.

until now - i used to export BKPF table to identify main financial conflicts. (i just need to take the username and transaction)

i'm looking for some table that will show me financial and operational activities performed by users.

my question is - does CDHDR contains BKPF ?   do you have any idea what is the best way to make it?

THANK YOU.

Amiel

[Former Member]

Hello all,

I would like to analyze the activities performed in SAP in order to indetify access-rights conflicts by users.

until now - i used to export BKPF table to identify main financial conflicts. (i just need to take the username and transaction)

i'm looking for some table that will show me financial and operational activities performed by users.

my question is - does CDHDR contains BKPF ?   do you have any idea what is the best way to make it?

THANK YOU.

Amiel

[Former Member]

CDHDR (and CDPOS) do contain entries for BKPF, but only for changes. So it's probably not what you want.

Rob

[Jelena_Perfiljeva]

You can easily check all you need in a test system - just start SQL trace (ST05) and then run the transaction(s) of interest. It's quite unusual for the accounting documents to be changed though since there are only few minor changes even possible (like text).

Also I'm pretty sure there should be some special tool available for this (can't imagine all SOX compliant companies checking for SOD conflicts this way), but it's not my area of expertise.

[former_member235395]

Hi Amiel,

Just for clarification, as well as BKPF has its details (BSEG), CDHDR has its details too (CDPOS).

So, on TABNAME and TABKEY fields , you will get the BKPF or BSEG document number which is changed.

I.E. entry SE16 to CDPOS table and do this filter: TABNAME = ('BKPF', 'BSEG'). See the image.

Regards,

[former_member235395]

Hi Amiel,

Just for complement, i think is very important. How we know what information is located in CDHDR / CDPOS?. The reason is the "Indicator for writing change documents table" like BELNR_D data element, if this check is flagged so:

"

Indicator for writing change documents

Use

This flag is used to create change documents for business objects.

You can create a change document object for a business object. This change document object contains the tables in which the data of the business object is stored. Function modules that are called in the corresponding application programs and that log the changes at runtime can be generated from the change document object.

Logging only takes place if the fields whose contents were changed refer to a data element that was flagged as relevant for the change document.

You can go to the maintenance screen for change documents from the initial screen of the ABAP Workbench with Development -> Other tools -> Change documents."

Basically, means all changes to this field will be tracked automatically by the system, & a change document will be created in CDHDR/CDPOS.

Regards,

[Former Member]

THANK YOU!