Ansicht
Dokumentation

SU2X_COMPUTE_INTV - Help Report for Interval Calculation

ABAP Short Reference   General Data in Customer Master  
This documentation is copyright by SAP AG.

Purpose

In a few rare cases it is necessary to maintain manually calculated authorization intervals in PFCG roles instead of dedicated authorization single values. This report returns the hit list for a selection criterion and the authorization intervals valid at this time for selected authorization fields.

Security note:

The calculated intervals are only of limited use for authorization maintenance. If the environment conditions change (a change of system, a different object set) but users still have the same authorizations, this can present a security risk. ,,

Features

Selection

In the standard selection area, you can specify a “technical field” (for example, transactions, startable programs, ABAP Dictionary tables, and RFC function modules) as well as content search criteria (object name).
There are also optional selection criteria for objects.

The output options that are selected determine the layout of the result list:

• We recommend using “Display of Single Objects” first to check the hit list that is returned by these selection options using the simple result list.

• The result list for “Display of Calculated Intervals” shows the corresponding authorization intervals based on the full object set (for example, all existing transactions) at the time of selection.

• You can use the option “Check for Differences in Object List” to evaluate risk for intervals that have already been calculated and used, and display changes in the full object set since the last check.
  Note: You cannot select by object name or use the optional selection criteria for this option.
  If the “Update Local Object List” checkbox is selected, the full object list for the respective selected authorization field is set to the current status of the local system.

Using this expert tool simply makes life easier when maintaining authorization intervals.
We recommend that you document any interval selection criteria that you use with variants and check them regularly.
Generally, we recommend that you regularly check the content of all maintained authorization intervals (not just for the fields supported by this program).

Standard Variants

Output

Activities

Example

General Data in Customer Master   CPI1466 during Backup  
This documentation is copyright by SAP AG.

Length: 2695 Date: 20240520 Time: 143528     sap01-206 ( 50 ms )