Hi!
Being a post-4.5 guy I started working on security with PFCG and I still have no hands-on experience with the manually created profiles. (Think that won't change anymore)
When auditing a system I always search for manually created profiles and profile assignments without a role assignment to make sure I don't miss anything by just checking the roles.
Besides that, the SAP authorization management toolset keeps changing and evolving.
What I'd like to do here is collect a list of minor and major changes with their release(-date) . This idea was prompted by the fact that I can't find when the user address data was moved from the USR tables to the ADR tables. It might even become a useful list for the sticky thread... some ideas:
For Central user administration SAP Help states the document is valid for systems starting at: Release 4.6B, Support Package Level 49
Composite profiles were in use in which releases?
When did activity groups & PFCG replace the manual authorization creation?
SU24 switches, how new are those?
How about derived act.groups? And comosites?
With which release did activity groups change into roles?
When did the addresses move to the central address system?
Since when is the S_TCODE object read-only?
Jurjen