Is modifying CDPOS table is advisable???

[Former Member]

Hi ,

For PWC audit as per the rules no credit card details should be stored in SAP system. For that we have written a Zprogram which will modify the Documents via FB02 trasaction but now the Changes are captured in CDHDR and CDPOS table. Now please suggest a way to remove that. Currently I'm Changing those credit card values in CDPOS to '*' using modify statement is that advisable ? if not please give me some suggestions.

Thanks and Regards,

Arun.

[Former Member]

Hi ,

For PWC audit as per the rules no credit card details should be stored in SAP system. For that we have written a Zprogram which will modify the Documents via FB02 trasaction but now the Changes are captured in CDHDR and CDPOS table. Now please suggest a way to remove that. Currently I'm Changing those credit card values in CDPOS to '*' using modify statement is that advisable ? if not please give me some suggestions.

Thanks and Regards,

Arun.

[RaymondGiuseppi]

Before filling change document tables with FB02, remove the flag "change document" in the data element associated to credit cards (requires a sscr key)

Regards,

Raymond

[Former Member]

Hi Raymond,

Thanks for your suggestion,  we are already considering that option  but the problem is we need to change that settings in the Zprogram itself not manually is that possible? We are also planning to recheck the flag after the modification and all this to be done via Zprogram.

Thanks and Regards,

Arun.

[RaymondGiuseppi]

I would not do that in a program executed in productive system. I would (your zprogram should run only once ?)

• create a first worjbench transport request with deactivation of the check,
• import and execute program
• create a second request with reactivation of flag

If auditors disagree, to change flag either

• Look at FM like DDIF_DTEL_GET, _PUT and _ACTIVATE (read, update, activate data element). (*)
• Code the import of the request in a program (little oversized solution...) with FM like
  • TMS_MGR_GREP_TRANSPORT_QUEUE  Check request in import queue
  • TMS_MGR_FORWARD_TR_REQUEST  Add missing request to import queue
  • TMS_MGR_IMPORT_TR_REQUEST  Execute import

Regards,

Raymond

(*) Those FM are released for use, but are we allowed to change standard element is another matter...

[Former Member]

Hi Raymond,

Now we are facing an issue. After the TR for the deactivation of check box if we run the program it will take a large window of time because of the huge data present in the system. Also the changes made by other Interface are not captured during that period. Please give you opinion on this and also I have a doubt like we are not deleting any entries from the CDPOS Table we are just panning out one Field so why is it not recomended over the metho of not at all capturing the changes.

Thanks,

Arun.

[FredericGirod]

Hi,

remove the parameters of the tables containing the credi card --> Log data change in SE11 (technical settings)

Never modify the CDHDR or CDPOS table, it's an audit issue

regards

Fred

[Former Member]

Hi Arun,

Making changes in Standard table is not advisable as it may lead to inconsistency of data. As changes made by Standard transaction not only lead to changes in only one or two tables. But if you are sure to remove those data which are there in CDHDR and CDPOS then you can do it by following way.

1. Open SE16N and put the data that you want to delete in the table.

2. Fire /h and then execute the table

3. now change the value of gd-sapedit and gd-edit variables in debugging to X. i.e. enable these 2 flags       and press F8.

                                The table is in change mode no and you can change or delete the record. But make sure you don't need them.

Regards,

Paavan

[FredericGirod]

What ?! 

Arun have an audit and you explain how to be killed by PWC ?

SAP is not a game

Fred

[Phillip_Morgan]

Especially when you know that changes through SE16(N) are traced by SAP.

And auditors know where to look...

Your best option is NOT to let this information into the change document tables in the first place.