We've found that(using Tcode:SCU3) the content (Comp. address info) of T001 table has been changed several times over the past month by user ID: DDIC. Is this mean the changes actually made by DDIC(as someone logged in with this ID)? or other tcode can initiate the change, and the program/report has utilized DDIC to make actual changes. If so, what are some of the tcodes that can initiate such change? I appreciate if anyone can help me understand this better, and how I go about finding a person who made the change.