Authorizations For SWO1 - Delegation Execution

[Gardiner, Keith (CIS)]

Hi
 
It makes sense to remove the authorisation from Production but I don't understand why from Dev.
 

Regards. 

Keith Gardiner
CIS Cheadle 
0161 741 6109 

-----Original Message-----
From: sap-wug-bounces at mit.edu [mailto:sap-wug-bounces at mit.edu]On Behalf Of Martinek, Jerry
Sent: 15 September 2005 17:52
To: sap-wug at mit.edu
Subject: Authorizations For SWO1 - Delegation Execution



Hi,

 

I'm interested in finding out how other SAP clients are dealing with this scenario/issue. 

 

Our security group removed the authorization object S_TABU_CLI from all of our roles in all of our SAP systems (development and production) due to a perceived security risk. The external auditor who reviewed the SAP authorizations mentioned that this authorization object poses a risk so our security group removed it from all SAP environments.

 

This decision basically removes our ability to execute SAP functionality that updates cross client tables.

 

The immediate impact to me is that I can't execute the 'DELEGATION' function in SWO1 because you need to have the S_TABI_CLI authorization object in your role. Now I need to request a temporary authorization change in order to complete the delegation function. 

 

Is this the norm or was it just a bad auditor?

 

Thanks,

Jerry Martinek  

 

   


This email has been scanned for all viruses by the MessageLabs SkyScan service.



**********************************************************************************
This email and any files transmitted with it are confidential, and may be subject to legal privilege, and are intended solely for the use of the individual or entity to whom they are addressed.  
If you have received this email in error or think you may have done so, you may not peruse, use, disseminate, distribute or copy this message. Please notify the sender immediately and delete the original e-mail from your system.

Computer viruses can be transmitted by e-mail. Recipients should check this e-mail for the presence of viruses. The Capita Group and its subsidiaries accept no liability for any damage caused by any virus transmitted by this e-mail.
***********************************************************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.mit.edu/pipermail/sap-wug/attachments/20050916/453869aa/attachment.htm