Home > Ask the SAP Experts > SAP security Questions & Answers > Security risk: Users able to see data from other companies
Ask The SAP Expert: Questions & Answers
EMAIL THIS

Security risk: Users able to see data from other companies

Corwin Slack EXPERT RESPONSE FROM: Corwin Slack

Pose a Question
Other SAP Categories
Meet all SAP Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 12 June 2008
We are using SAP 4.6c on a single instance. We have one controlling area with multiple companies. We have a problem where a user in one company can have access to the data of other companies. This problem presents itself in FI, CO and MM. We want to resolve the issues by adding authorization controls, but have failed. Is there any solution that you can recommend to solve the issue?

>
EXPERT RESPONSE
By design CO is controlled by Controlling Area for almost all processing actions. You can control the display and some activities around reporting, budget planning and master data maintenance using the cost center hierarchy. If this hierarchy mirrors your company code structure it may serve your purposes. MM controls are based on plants, purchasing organizations and purchasing groups. Plants are typically set up for one company code so adding all the plants for one company to a user's role may mirror your company code security. FI organizational security is based on company code.


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
SAP security
Job prospects in SAP security
SAP HR Portal access security
Restricting sales document assignments by sales area
Authorization objects with a value of single/double quote marks
Error logging in using a reference ID
Assigning roles to all users in a group
What is the process for resetting a DDIC password?
Accessing the SE38 T code with only display authorization
Listing TCODE transactions used to view what users are logged in to SAP
F_LFA1_APP and editing authorization restrictions

SAP security
The difference between an SAP system and a non-SAP system
SAP administration information for a Basis interview
Quiz: SAP ABAP development
Restricting sales document assignments by sales area
Authorization objects with a value of single/double quote marks
Error logging in using a reference ID
Easier maintenance of output types, procedures, conditions, etc.
Assigning roles to all users in a group
On The Spot: Mario Linkies on SAP security
SAP delivers Web services for GRC integration

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice

HomeNewsTopicsBlogsTipsAsk the ExpertsMultimediaWhite PapersProducts
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2000 - 2008, TechTarget | Read our Privacy Policy
SearchSAP.com is a search service provided by TechTarget and is completely
independent of and not affiliated with SAP AG.
  TechTarget - The IT Media ROI Experts