Skip to Content
author's profile photo Former Member
Former Member

Verifying that customized R/3 tables are assigned to appro auth grp

I see a bunch of tables assigned to auth class &NC&....what does this mean? is that a valid authorzation group?

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

1 Answer

  • Best Answer
    author's profile photo Former Member
    Former Member
    Posted on Feb 09, 2009 at 07:23 PM

    Hi ,

    When you a create a table maintenance to any Custom Tables , you can limit Access to that tables for creating or changing entries in SM30,SM31.

    If you use authorization group other than &NC& , then that particular authorization needs to be added to USER Profile other wise the cannot access that table.

    &NC& MEANS NO AUTHORZIATION. Any user can access that ttable in SM30/31



    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      > So our auditers want to know why it is set to &NC&...we can say its just not impt enough to have auth groups associated with these tables?

      The data browsers will convert an empty table authorization group to &NC& (not classified).

      You can interpret this as "no reason to protect it", but I prefer "no reason to display it directly".

      Unfortunately, the creating a view defaults this value so when no auth group is know for it, you only need to make this mistake once...

      By the sound of it, your auditors are on the right track - but they should be considerate as there is lots of room for mistakes and using concepts with different controls within the same system.

      The obvious problems become visible when these concepts are mixed into roles for the same user...

      My advise would be to concentrate on S_TABU_DIS, and avoid &NC& - another reason for this is that interperting single fields of &NC& tables to mean something on their own can be a real hazard and is seldom sustainable...



Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.