SAP security - changing check maintain setting for security objects

[Former Member]

I am trying to change the check maintain indicator for a couple of transactions

to alow me to manage access based on security objects that are not currently defined as check maintain. Specifically, I have updated the check indicator

(using SU24) to check maintain for object c_stue_ber on transactions MD11 and MD12 (planned order create/change). The transactions still do not check this object as expected. Does anything else need to be done to enable checking an

object that is not set up as check maintain originally?

Any help is appreciated.

Thanks,

Doug Scott

[Robert_Leitner]

SAP has here an very high security leak.

Many companys have to restrict the access to their boms.

This works in CS..-Transactions (e.g. CS02) with object c_stue_ber, but not in the component-view in production orders (e.g. CO02) what corresponds normally to the boms.

The answer from SAP which i received: System works as designed.

I had a very long interchange of letters (in german) with SAP. They recommended, to modify the system.

Maybe you've got better solutions?

You have the same problem in the calculation (e.g. CK13N), where you can open the calculation-structure on the left side totally - which also corresponds to the boms. The object c_stue_ber is already included in this transaction but it is not checked.

br Robert