S_TABU_CLI

[Former Member]

Hi All,

One of my end user is accessing some Z tables which are not Client independant...,

So we removed S_TABU_CLI access with X value as per SOX. so he is not authorized to modify the Z tables now. Is there any other way to get authorized to modify those tables.

Thanks,

Noone

Edited by: pravin n on Jun 18, 2009 11:00 AM

[Former Member]

Hi Pravin,

Did you checked the Su53 of the user when he failed for the Z table ?

Let me know what you find in the SU53 error screenshot.

Cheers !!

Zaheer

[Former Member]

Authorization check failed

Object Class BC_A Basis: Administration

Authorization obj. S_TABU_CLI Cross-Client Table Maintenance

Authorization field CLIIDMAINT Indicator for cross-client maintenance

X

>3 User's Authorization Data QUILLD

>Object Class BC_A Basis: Administration

>Authorization object S_TABU_CLI Cross-Client Table Maintenance

>Authorizat. T-SC99090800 Cross-Client Table Maintenance

Profl. T-SC990908 Profile for Role XX000&TBL_ZADI

Role XX000&TBL_ZADI Tables for ADID

>Authorization field CLIIDMAINT Indicator for cross-client maintenance

' '

[Former Member]

Check the Client Specific settings for the table via the table DD02V. S_TABU_CLI will only be checked for 'X' only if the table is a cross client table.

Cheers !!

Zaheer

[Former Member]

Hi,

s_tabu_cli is required with (X) for maintaining cross client tables. At least there should be some fire fighting access or mitigation control to deal with these situations. A role should be there with the access which needs to be given to Fire fighter users (eg. One time authorizations)as a way of mitigation control.

Regards

Aveek.

[Former Member]

here is the table DD02V .

TABNAME DDLANGUAGE TABCLASS CLIDEP DDTEXT

ZZADIDFTP C TRANSP ADID FTP Transfer Log

ZZADIDFTP E TRANSP ADID FTP Transfer Log

ZZADIDFTP F TRANSP FTP TRANSFER MANAGEMENT

ZZADIDFTP I TRANSP ADID FTP Transfer Log

ZZADIDFTP P TRANSP ADID FTP Transfer Log

ZZADIDFTP S TRANSP ADID FTP Transfer

[Former Member]

Seems like CLIDEP is blank for all the Z tables which you have posted, if these are not cross client then 'X' should be there in the CLIDEP column.

Also, check the meta directory of the table, with SE12, check if the table has MANDT field in the table. Client dependent tables have this field.

Cheers !!

Zaheer Kazi

[Former Member]

Hi,

How can we change the table client independent to client dependent.

[Former Member]

Hi Zaheer,

Could you please tell me how can we change a talbe from Client independent to client dependent.

And in my case I copuld not find any MANDT field with ANY Z talbes.

where can we find that MANDT field for Z tales.

Thanks,

Noone

[Former Member]

pls ask your User to add MANDT field to the all Ztables and check after the modification.