Home > Ask the SAP Experts > SAP security Questions & Answers > Authorization objects with a value of single/double quote marks
Ask The SAP Expert: Questions & Answers
EMAIL THIS

Authorization objects with a value of single/double quote marks

Corwin Slack EXPERT RESPONSE FROM: Corwin Slack

Pose a Question
Other SAP Categories
Meet all SAP Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 12 June 2008
I have some authorization objects that literally have single or double quotation marks as their values. I see these values associated with objects such as S_BTCH_NAM. What do these values allow or permit as part of this authorization object?

>
EXPERT RESPONSE
Sometimes the SAP programs perform an authorization check before a particular value has been input by the user. For example at transaction start some programs check the activity code (e.g. 01) but no opportunity to enter an organizational value has been given the user (e.g. company code). The authorization will test the user's authorization for single quotation mark values. It doesn't typically make a lot of sense to do this with an authorization object with a single field but developers who do not understand the authorization concept may be arbitrary in how they use objects and customers must provide the values that will allow their users to do their work.


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
SAP security
Job prospects in SAP security
SAP HR Portal access security
Restricting sales document assignments by sales area
Error logging in using a reference ID
Security risk: Users able to see data from other companies
Assigning roles to all users in a group
What is the process for resetting a DDIC password?
Accessing the SE38 T code with only display authorization
Listing TCODE transactions used to view what users are logged in to SAP
F_LFA1_APP and editing authorization restrictions

SAP security
The difference between an SAP system and a non-SAP system
SAP administration information for a Basis interview
Quiz: SAP ABAP development
Restricting sales document assignments by sales area
Error logging in using a reference ID
Easier maintenance of output types, procedures, conditions, etc.
Security risk: Users able to see data from other companies
Assigning roles to all users in a group
On The Spot: Mario Linkies on SAP security
SAP delivers Web services for GRC integration

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice

HomeNewsTopicsBlogsTipsAsk the ExpertsMultimediaWhite PapersProducts
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2000 - 2008, TechTarget | Read our Privacy Policy
SearchSAP.com is a search service provided by TechTarget and is completely
independent of and not affiliated with SAP AG.
  TechTarget - The IT Media ROI Experts