Ansicht
Dokumentation

auth/no_check_in_some_cases - Activation of the Profile Generator

------------------------------------------------------------------------

| Parameter : auth/no_check_in_some_cases                              |

------------------------------------------------------------------------

------------------------------------------------------------------------

| Kurzbeschreibung : Activation of the Profile Generator               |

------------------------------------------------------------------------

------------------------------------------------------------------------

| Parameter description :                                              |

| -----------------------                                              |

| You must set this parameter to "Y" if you use the                    |

| profile generator.                                                   |

|                                                                      |

| The profile generator uses the authorization default values, which   |

| you can maintain with transaction SU24. You also use transaction |

| SU24 to set whether and which authorization checks should be         |

| suppressed for selected transactions.                                |

|                                                                      |

| Note:                                                                |

| If you have switched off authorization checks using transaction SU24,|

| users can perform activities without having the corresponding        |

| authorizations.                                                      |

| Nevertheless, it can make sense to reduce the scope of authorization |

| checks, such as in the following cases:                              |

|                                                                      |

| 1. You do not use the authorization object connected with the        |

|    authorization check (for example, in FI, you use HR |

|    authorizations, although you do not use the HR system at all.     |

|                                                                      |

|                                                                      |

| 2, The authorization check for the object S_TCODE protects

|    the core transaction anyway.

|    (Note, however, that the authorization check S_TCODE only         |

|    very general protection. This is in itself not a reason to        |

|    suppress an authorization check.)                              |

|                                                                      |

| 3. You want to avoid allowing all values (*) for every authorization |

|    field in the authorization object.                                |

|                                                                      |

| If you have suppressed authorization checks (you have set the        |

| parameter to "Y"), we recommend that you check the data in SU24      |

| regularly to ensure that the entries are set to the correct          |

| values.                                                              |

|                                                                      |

 ----------------------------------------------------------------------



------------------------------------------------------------------------

| Work area :  Auth                                                    |

------------------------------------------------------------------------



------------------------------------------------------------------------

| Unit :                                                               |

------------------------------------------------------------------------



------------------------------------------------------------------------

| Default : Y                                                      |

------------------------------------------------------------------------



------------------------------------------------------------------------

| Who is permitted to make changes: The customer                       |

------------------------------------------------------------------------



------------------------------------------------------------------------

| Limitations for operating systems: None                              |

------------------------------------------------------------------------



------------------------------------------------------------------------

  Limitations for database systems: None

------------------------------------------------------------------------



------------------------------------------------------------------------

  Are other parameters affected/dependent: No

------------------------------------------------------------------------



------------------------------------------------------------------------

| Valid entries, formats, areas :  Y, N                                |

------------------------------------------------------------------------





------------------------------------------------------------------------ 

| Short Description : Activation of the Profile Generator 

------------------------------------------------------------------------ 



------------------------------------------------------------------------ 

| Applications Area : Auth 

------------------------------------------------------------------------ 



------------------------------------------------------------------------ 

| Parameter Type : X 

------------------------------------------------------------------------ 



------------------------------------------------------------------------ 

| Changes allowed : X 

------------------------------------------------------------------------ 



------------------------------------------------------------------------ 

| Valid for Operating System : * 

------------------------------------------------------------------------ 



------------------------------------------------------------------------ 

| Dynamic switchable :  

------------------------------------------------------------------------ 



------------------------------------------------------------------------ 

| Same on all Servers : X 

------------------------------------------------------------------------