FW: Transactions Slated for Removal from Roles in Production Syst ems

[Nobles, Diane]

Good morning all.  We are still fighting the security issues with certain
transactions.  The transactions listed below are being removed from all
profiles in Production, including the workflow developers, administrators,
ABAP'ers, etc. profiles.  As we do not have a lot of workflows in our
production and have not had any real issues as of yet, I do not see any real
issues at this time.  Are any of you real workflow'rs aware of what problems
the loss of these transactions will cause for us in the monitoring and
troubleshooting areas???  Of course when these things become a problem we
will address them, but I am trying to not wait until the fat hits the fire.
Any thoughts are welcome.
 
Diane H. Nobles
Northrop Grumman-Naptheon
SDE PM Team
(757) 380-7250
 
A recent audit identified areas of perceived access vulnerabilities. Basis
Lead has compiled the following list of transactions to be removed from our
Production access:
>                       SC38 Cross-system Program Execution
>                       SE80 Object Navigator
>                       MN0Z ABAP Editor:Initial Screen
>                       SQ01 Query from User Group AM:Initial Screen
>                       SQ02  InfoSet:Initial Screen
>                       SE11 ABAP Dictionary: Initial Screen
>                       SE13 Dictionary: Technical Settings
>                       SE16 (will be replaced by SE16N) Data Browser:
> Initial Screen
>                       SM30 Maintain Table Views:Initial Screen
>                       SM31 Maintain Table Views:Initial Screen
>                       SU01 User Maintenance:Initial Screen
>                       SCC4 Allows locking and unlocking the client
>                       SM01 Allows locking and unlocking transactions
>                       SM59 - still under discussion
> Be prepared to discuss any customer support issues you may have relative
> to these changes in Friday's Staff Meeting.
>
>