About monika_suchy2

monika_suchy2

Scenario A user can set the parameter CRM_UI_PROFILE to a specific value or even * . It's a security risk, because a user could use a standard business role instead of the customer configured role. The user parameter overrules any other role ...

monika_suchy2

With this implementation you will be able to send mails from solar02 when changing status.Therefore I will use the enhancement spot SOLAR_DOCUMENT_EXITS, which is normally used for changing attributes during document save. Use case: Send an e-mail to...

monika_suchy2

I totally agree, this shoudn't be a user parameter ... and there are many other critical parameters. Just think about WCF_IGNORE_ENHANCEMT: with the value A the user can deactivate the existing UI Enhancement Sets.The best protection is that most of ...

monika_suchy2

Hello Carsten,the restriction in UIU_COMP doesn't close the security hole totaly. If a user can use a different business role all customer specific restrictions (e.g. disabled fields or assigment blocks) are not considered.Regards,Monika

Re: Restrict users to create Activities

Hello Arun,please check all authorization objects discribed in the process flow of authorization check:http://help.sap.com/saphelp_crm60/helpdata/en/48/a44236ceb873e8e10000000a42189b/content.htmKind Regards,Monika

monika_suchy2

please check, if your general email settings are correct. For testing this, you can send an email via system --> short message (enter a valid email address)In the next step check SOST

monika_suchy2

Please check my documenthttp://scn.sap.com/people/monika.suchy2/blog/2013/07/25/restrict-access-to-business-roles-in-web-uiIt describes a way to restrict business roles using an own authorization object.Monika

User Statistics

User Activity

Restrict access to business roles in Web UI

Send e-mail after changing document status in solar02

Re: Restrict access to business roles in Web UI

Re: Restrict access to business roles in Web UI

Re: Restrict users to create Activities

Re: Send e-mail after changing document status in solar02

Re: Deactivate unusable business roles