Skip to Content
author's profile photo Former Member
Former Member

Assign a table to many table-authority-groups?

Hi,

can one assign one table to many table-authority-groups in SE54? I'am creating a Role with almost SAP_ALL, though there should be some restrictions concerning client properties for example. Until now I excluded SAP_ALL from S_USER_PRO, SYSC and TABL from S_CTS_ADMI and SCC5 from S_TCODE. I'am aware of the functions to change tables in SE16 AND SE80. Therefore I'am thinking about a restriction that allows only reading of T000. I know the table-authority-group SS which one could use to constrain access to the table to readonly, but there are many other tables in SS. Therefore I would like to create two own groups, one like SS but without T000 and one that contains only T000, and restrict access to the second group to readonly. When I tried this I get a message that there is already a row with the same key, though I suppose one might not be able to assign two groups to one table.

Nevertheless I would be very happy about your Suggestions 😊 .

best regards

floweb

Edited by: floweb on Feb 4, 2010 11:20 AM

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

2 Answers

  • Posted on Feb 04, 2010 at 10:40 AM

    Moved to the Security forum

    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on Feb 04, 2010 at 10:44 AM

    You can only assign 1 auth group to a table. Even if you did this you would not meet your restriction requirement as starting from SAP_ALL is never recommended. You need to develop a role from scratch, there is lots of info on this forum and in the FAQ's

    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      >I think I found some "buttons" that fit these simple requirements.

      >I deleted SAP_ALL in S_USER_PRO,

      >SYSC in S_CTS_ADMI and set S_TABU_CLI to 'X'.

      >Therefore at least the role constrains SU01, SE06, SCC4 AND SCC5.

      I don't understand this and can see some holes in it already. Can you explain?

      Cheers,

      Julius

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.