Community
Application Development and Automation Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Read only

SAPDBA Question for Basis/Security

Former Member

‎2006 Jan 05 9:54 PM

0 Likes
319

Guys,We have a possible Audit issue with one of the Auditors next week. He is asking me if there is a "backdoor" entry for a Database person to create a fictious userid via AGR* table and get access to SAP..?

Any inputs appreciated..

Thanks

Guys,We have a possible Audit issue with one of the Auditors next week. He is asking me if there is a "backdoor" entry for a Database person to create a fictious userid via AGR* table and get access to SAP..?

Any inputs appreciated..

Thanks

Reply
1 REPLY 1
Read only

RichHeilman
Developer Advocate
Developer Advocate

‎2006 Jan 05 9:58 PM

0 Likes
304

If you have access to the underlying database, and you know all of the tables that need to have an entry in them, and you have enough time for all this, then yes, I believe that it could be done. The big thing here is, is your underlying database locked down. Meaning, is there a password on accessing the underlying database. If so, then you are pretty safe.

Regards,

Rich Heilman