Description Conversion of S_DEVELOP authorizations The existing S_DEVELOP authorizations contain implicit debugging authorizations. Authorizations for debugging and displaying/changing programs were previously separated from one another. This conversion program generates additional debugging authorizations from existing authorizations. It then inserts them in the single profiles affected. The old authorizations remain the same. The debugging authorization can be subsequently revoked for particular users. You can execute this report several times. New authorizations are generated once only. The conversion affects application developers; Therefore, you can also perform it after an upgrade. If an error occurs, you can restart the report. The following tables are modified:
- usr12 User master authorization values:
New authorizations are added.
- usr13 Short texts for authorizations:
New authorizations are added.
- usr10 User master authorization profiles:
Profiles affected are changed.
- ust12 User master authorizations:
New authorizations are added. The conversion looks like this: Old authorization New authorization OBJTYPE ACTVT -> OBJTYPE ACTVT PROG 03 DEBUG 03 SYST 03 DEBUG 03 PROG 02 DEBUG 02 SYST 02 DEBUG 01Precondition There are no particular requirements. If no S_DEVELOP authorizations exist, no new authorizations are generated. Output The new authorizations receive the same names as the original ones with '&' placed in first position. The report specifies the number of authorizations converted and the number of profiles changed. Example The authorization E_ABAP_ALL for object S_DEVELOP contains the following values: ACTVT = * OBJTYPE = PROG .... The new authorization &_ABAP_ALL is generated with the values: ACTVT = '02' + '03' OBJTYPE = DEBUG Single profiles that contain the S_DEVELOP authorizations are changed. The profile S_ABAP_ALL contains E_ABAP_ALL. The authorization &_ABAP_ALL is added to it.
|