on ‎2009 Apr 29 4:49 PM
This thread is to post your daily rants. Sometimes you just need to get something out of your chest before you get an ulcer
So go ahead and post...
Request clarification before answering.
And now for something completly different.
The first message of this thread stated that this thread should offer relief of ulcer or even prevent it. So, my daily rant (expecting no answer): Why does the log view in the sapinstgui or the "SAP Netwaever Software delivery tool" offer the menu entry 'View log' when it shows only utterly usesless protocols?
Why are the important log spread over three different places (sapinst_instdir, j2ee/JSPM, j2ee/cluster/sever/log )? And why does the update tool not notice when the DB logs are full?
Have an nice day,
niels
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
My daily rant will be " why don't you search " As every day new member will join in SCN and he will be raring to answer a question which is basic as it will be a new question for him so he can answer .Anybody disagree with that?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
> it will be a new question for him so he can answer .Anybody disagree with that?
This basically was the point why I am in favour of a "beginners forum". That has been discussed a while ago. In such a forum everybody can get used to being a forum member at their own pace. Once the beginners forum leaves no more challenges he/she may be ready for the "real thing".
For the current forums I am strongly against answering basic questions as it does not add any value to the knowledge already collected in the forums and will only pollute the search results.
> Really Jurgen then answer to my post in one of my cricket threads .Why dont you answer there only because you can't understand cricket or what the topic is or what the situation is.
Another property of the forums is that you cannot demand/force other people to answer. Misspelling my name isn't a real advertisement either.
Why? I mean why? Why do the authorisation teams try to lock down developer access on a development box? What IS the point? I've just started a development and find I can't run transactions that I've created! Since I can actually create userids - what IS the point of securing the developer role with S_TCODE. Furthermore, why is it that I'll always have SE80, but SE24, SE37 etc. are never available first time.
I feel better now.
> Why? I mean why? Why do the authorisation teams try to lock down developer access on a development box?
As I am an authorization consultant I can must add: Why do people and/or businesses require us to restrict developers on the development system? There's no point as the rights they need to do their job include sufficient rights to bypass any authorization check. It's like locking doors in a building where the walls are being built. There's no point in doing that, it only annoys the developers.
Besides that, any authorization consultant who believes in S_TCODE shielding on dev systems should pack up and leave.
Agree with Jurjen on the silly tcode aspect, but there is another one which is often neglected.
When a developer develops an application and creates a transaction to start it (or an RFC or Service), it is ideal at that point in time that a role is also developed together with the customizing (which includes the SU24 indicators and proposals) for the application. Such a role would ideally be in the name space of the unit test roles.
As authorizations also influence the behaviour of the application when complex AUTHORITY-CHECK constructs are built (modularization techniques!) it is best to create a test user and assign this role to use the application to it to test it.
So it is exactly as you have stated, except without the rant as your own ID does not need the transaction code...
Cheers,
Julius
> So it is exactly as you have stated, except without the rant as your own ID does not need the transaction code...
I believe in functional tests before the authorization tests so we disagree here. A developer should be able to start any transaction he creates before the test role and user are created.
Just my 2 cents/rant
Hi Jurjen,
Classic examples of where this does not work are the subroutine forms in SM37 / SM36. The system is checking throughout the navigation whether you are a batch administrator, can schedule jobs in foreign user names, can add or change logical commands or external server programs, whether the jobstep user is the same as sy-uname, etc, etc...
You cannot do a test of whether the coding is functionally correct with a SAP_ALL user or a SAP_DEVELOPER role. It is not what the SM37 application requirements set out to do and possibly explains the many inappropriate access to the authorization objects used.
Additionally, I would like to add that I know Matt. We worked in the same office for 5 years. The best way to get a beer out of him is to remove some silly tcode from his role and wait for the call...
Cheers,
Julius
My 2 cents...
IMHO the developers should have the ability to execute some basic testing to custom tcodes. The custom tcodes can then be "unit tested" in the DEV (Unit Testing Client) with test user IDs and their appropriate role. The integration testing will continue in QA using test user IDs also.
We have everything documented in our process, so if for some reason the custom tcode have security errors in PROD we can always blame them for lack of testing.
>
> > Why? I mean why? Why do the authorisation teams try to lock down developer access on a development box?
> As I am an authorization consultant I can must add: Why do people and/or businesses require us to restrict developers on the development system? There's no point as the rights they need to do their job include sufficient rights to bypass any authorization check. It's like locking doors in a building where the walls are being built. There's no point in doing that, it only annoys the developers.
>
> Besides that, any authorization consultant who believes in S_TCODE shielding on dev systems should pack up and leave.
APPLAUSE
On the subject of testing, I've worked on sites where I've had to write the unit test scripts, hand the development over to someone else to ensure that all the documentation and the program and the test scripts are sufficient and no discrepencies, and then hand the development over to a third person to run the test scripts, and record the results.
Similar rigour was applied in the test box.
Funny thing was. It took a couple of days longer to get stuff to production. But it generally worked! The (engineering) client save $$$$$$$$$$$$$$$ in maintenance.
Rant of the Day:
Random SCN members sending their requirements and asking me to take a look or just simply get the work done to my mai.l id.
pk
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi,
My rant of today is about transaction RZ10 which insists to tell me that a lot of my system parameters don't exist or that their values are ten times too high even if they are perfectly correct.
The checks in this transaction are completely obsolete. After each system upgrade, I hope that SAP would have corrected this mess but with Netweaver 7.0, I am still disappointed !
I am currently teaching system administration to a new colleague and he seems very surprised when I tell him not to believe some error messages....
Olivier
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
My rant for today is a person asking about security, somebody with (175 post and 0 post) had the audacity to question one of the top security contributors in the forum. I really hate leaches.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
>
> My rant for today is a person asking about security, somebody with (175 post and 0 post) had the audacity to question one of the top security contributors in the forum. I really hate leaches.
The perpetrator is now on final warning... if he does it again, he'll be out. Funny - I got an abuse report on you, from him! Backfired a little!
matt
My rant is that John made me blush and when I finally came up with an appropriate answer the thread was locked.
I'm not a saint and would be sad if no one questioned me and my sometimes blunt answers. That would take away my learning opportunities.....
Thanks for the defense though
And, pk, this isn't a very successful trainee either....."Total Questions: 551 (336 unresolved) "
Edited by: Jurjen Heeck on Apr 30, 2009 9:00 AM
>
> >
> > My rant for today is a person asking about security, somebody with (175 post and 0 post) had the audacity to question one of the top security contributors in the forum. I really hate leaches.
>
> The perpetrator is now on final warning... if he does it again, he'll be out. Funny - I got an abuse report on you, from him! Backfired a little!
>
> matt
Abusive... now that is funny. Thanks for looking up!
>
> My rant is that John made me blush and when I finally came up with an appropriate answer the thread was locked.
>
> I'm not a saint and would be sad if no one questioned me and my sometimes blunt answers. That would take away my learning opportunities.....
>
> Thanks for the defense though
>
> And, pk, this isn't a very successful trainee either....."Total Questions: 551 (336 unresolved) "
>
> Edited by: Jurjen Heeck on Apr 30, 2009 9:00 AM
Jurgen,
No problem. This forum is great and had help me on a lot of issues. Stand your ground and keep this forum the way it was intended to be. Kudos to the moderators and the main contributors and outstanding members.
Regards,
-John N.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.