Skip to Content
1
Former Member
Jun 26, 2013 at 06:11 AM

Issue in SAP Security PFCG Merge option

633 Views

Hi All,

I am facing an issue with " Read old Data and merge with new Data option " in PFCG. The issue is described below.

I have created a Role in which i added a t-code SU01 and this t code has got the below authorization default values for the object S_USER_SAS being maintained.

S_USER_SAS < Standard new>

ACT_GROUP: < EMPTY >

ACTVT : 01,06,022

Class: ABC

Profile: < EMPTY >

Subsystem : < Empty >

and this particular object has been added into my newly created role and i have maintained this object as below.

S_USER_SAS < maintained new >

ACT_GROUP: Z_SD_TEST

ACTVT : 01,06,022

Class: ABC

Profile: *

Subsystem : *

After which i have added a tcode Su10 and this t code has got the below authorization default values for S_USER_SAS.

S_USER_SAS

ACT_GROUP: < EMPTY > <Standard new >

ACTVT : 01,06,022

Class: Super

Profile: < EMPTY >

Subsystem : < Empty >

So the above object has been added into my role and i have maintained the object as below.

S_USER_SAS < maintained new >

ACT_GROUP: Z_MM_TEST

ACTVT : 01,06,022

Class: Super

Profile: *

Subsystem : *

and finally below are the objects which are in my role.

S_USER_SAS<Maintained >--SU10 S_USER_SAS <Maintained>-----SU01

ACT_GROUP: Z_SD_TEST ACT_GROUP : Z_MM_TEST

ACTVT : 01,06,022 ACTVT : 01,06,22

Class: Super Class: ABC

Profile: * Profile : *

Subsystem : * Subsytem: *

Now when i remove the t code SU01, the maintained authorization S_USER_SAS which is coming from SU01 is not getting removed, rather it is showing me the status as below.

S_USER_SAS <maintained New> S_USER_SYS < Maintained Old >

Act_Group: Z_MM_TEST Act_Group:Z_SD_TEST

ACTVT:01,06,22 Actvt: 01,06,22

Class:ABC Class: Super

Profile : * Profile: *

Subsystem:* Sub System: *

Could you please let me know why even after i am deleting the t code Su01 from Role Menu , the transaction whose authorization default values caused the maintained authorization has to be removed, but it is not done.......

Thanks and Regards,

Nagarjuna Srivatsa.