SM19 Security Audit: Display Kernel Parameters without modified authority

[Former Member]

Hello Experts,

is there a Chance to protect the Kernel Parameters in SM19 Security Audit against unauthorized users who wants to Change/modify the setting.

Exist there a user role or Profile which allow this user only to Display These Kernel Paramters Settings?

Thank you

Best Regards

[Former Member]

Dear Mr. Sindelar,

Perhaps the screenshot is from 7.4 because I don't see it  in my system. You may have already thought of this, if not then try this:

1. Create a temporary role in Sand/Development box and assign SM19 and SU53 to the role menu

2. Assign above role to a test ID

3. Login with the test ID and see if it is working the way it should

4. Go back to PFCG and start de-activating objects one by one and test

5. It may take you some time, but you will be able to find out the object that controls the parameters, if different from below.

Objects: S_C_FUNCT, S_ADMI_FCD

Sincerely,

AP

[mvoros]

Hi,

SM19 does not support access control on tab level. So a user has access to all tabs or none in change mode.  S_ADMI_FCD can be used to control read/edit. There are two different values. 

Cheers