Skip to Content
avatar image
Former Member

S_DEVELOP Missing debug authorization

Hi,

i just found that in our prod env. for bw for all developers we have S_DEVELOP authorization with all activities (*).

i just need to provide them debug access in prd without having access to change the values while debugging.

i see all the activities for S_DEVELOP but not sure what all of them does and why its been given *. can some one explain me all the activities and explain which one should be given ? also, should there be any restriction on DEVCLASS, OBJNAME, OBJTYPE, P_GROUP etc. coz all of them are having * value.

01 - create or generate

02 - change

03 - display

06 - delete

07 - activate, generate

16 - execute

40 - create in DB

41-delete in DB

42 - convert to DB

70 - administer

90 - override

L0 - all function

MA - Deactivate mod. assistant

Thank Y

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • avatar image
    Former Member
    Mar 10, 2011 at 09:17 PM

    Probably this comes from the role SAP_BW_DEVELOPER which is a piece of **** (sorry).

    All aspects (even display debugging) is critical.

    Try to remove all S_DEVELOP authorization and show them some of the blogs on SDN about transaction SE14 and debugging process chains.

    What you need to give them in return is an emergency user concept for when them within the BW (not the target system for the extraction) need to be able to use database utilities.

    9 times out of 10 there are better solutions, which they will find by necessity if their access is removed.

    They will then either improve their coding quality or start building in backdoors (changing ALEREMOTE or BWREMOTE to a service or dialog user and claiming that it cannot work without SAP_ALL and SAP_NEW (also stupid) is one such trick).

    Sorry for the rant. It was spontaneous and honest 😊

    Cheers,

    Julius

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Mar 10, 2011 at 02:32 PM

    Hi!

    just give them

    ACTVT 02

    and

    OBJTYPE DEBUG

    have fun

    Flo

    Add comment
    10|10000 characters needed characters exceeded