Answer / vasu.g

Hi Gaurav,

when ever the T-Code is assigned/added to role
it is going to pullout the authorization objects which are
maintained as Yes in SU24.

for your query if you set the value of the object from "No"
to "yes" then the object will be pulledout and you can
maintain the values in PFCG, when you add this T-Code to
any Role.

if you change the value of the object from "Yes" to "No"
the authorization objects will not be pulledout.

Hope This is da Answer you was Expecting!!!!

Answer / sreedhar

su24 displays the value of usobx_c and usobt_c of the tables. And whenever you change to yes to the particular object that will appear in the authorization maintainence screen and if no you will not be able to see the particular object in the authorization object.

Answer / asia

Question itself is wrong, proposal can be set to yes or no,
check indicator's value can be X, Y or N.

Answer / bvdb

When a user starts a transaction code, the AS will start to
process the ABAP code associated with it. If the AS finds
an AUTHORITY-CHECK statement in the source code, it will
check table USOBX_C to see if the function AUTHORITY-CHECK
has to be peformed or not.
If the check indicator is set on "Check", AUTHORITY-CHECK
will be performed.
If the check indicator is set on "Do Not Check", AUTHORITY-
CHECK will not be performed and return code RC = 0 (check
passed) will be logged.

Answer / madhu k

Changing Check indicator NO to YES --- NO IMPACT

Changing Check indicator YES to NO --- IMPACT

Answer / gaurav s

Thanks Ruchika, the above quoted answer is in scope of my
knowledge. But i am looking for the technical process which
skips the auth-check for an object which is marked Yes from
No in Auth Check column in su24.

Answer / gaurav s

Please could you read the question once again guys. I need
technical rreason how this change makes impace in
background process. Adding more to ur response, you have
told about proposal column, i want to know about check
indicator column, how it impacts the auth-check when we
change it from yes to no.

Answer / mj

N = Do not check; X = Always check; Y = Check + USOBT entry
The flag indicates how the system is to deal with the
authorization object (new mode) for an authorization check.


Value 'N' Authorization object is not checked when the
transaction is called.

Value 'Y' Authorization object is checked when the
transaction is called. The values for the fields of the
authorization object must also be maintained in table USOBT
for the profile generator.

Value 'X' Authorization object is checked, but the field
values are not specified in table USOBT for the profile
generator.

Value (SPACE) A valid flag ('N', 'X', or 'Y') has not yet
been assigned to the authorization object.

Answer / sky fly

No -> yes
changed auth. objects 'are now included in the affected
roles.if any field does not have a value in the role, then
authority check for the user will fail.
Yes -> No
changed auth. objects are now removed from the affected
roles. there will be no failure of authority check.

Answer / sanjay

Asia,

Everyone understood the question and replied accordingly except you. Words are changed but meaning is not.

In 4.7 EE, we have an option as User -> Settings -> Automatic Comparison at Save. Is it right if i say that this option checked will automatically prompt for User cpompare when we simply save the data after entering the users to the role? But whether the option is checked or not i did not get any prompt for User compare on saving the data after entering Users info in the role. My another doubt is whats the difference between User and Complete Compare options. If i dont do complete Compare, wiill that effect? Is it right if i say that User compare assigns the users to the role and Complete Compare updates the user master recoirds , i.e., User master record comparison is current.

3 Answers  

Explain internet-level security?

0 Answers  

What are su 24 t-codes used for?

1 Answers  

Is there a table for authorizations where I can quickly see the values entered in a group of fields?

0 Answers  

In pfcg where we can add customized t-codes. And where we can see customized t-codes

0 Answers   IBM,

how to modify a mass users validity,address,email...at a time ?

3 Answers   IBM,

i am asked to get through at "Authorizations analysis and correct assignments" wat does it mean and wat all concepts comes under these ?

3 Answers   IBM,

What is the benefits of ticketing tool?

1 Answers   IBM,

how to we Assigning Portal groups for Business users in BI

1 Answers   IBM,

(1)Difference between usobt_c and usobx_c?(2)What are usobt and usobx tables for?(3)Difference between usobt and usobt_c?(4)Se93.How u create custom t-codes?(5)Difference b/w customizing request and workbench request?(6)To trnsprt sU24 setting which is used is it customizing or workbench request?(7)If we add org level elements in a master role will it reflect in child role and how AGR_1252 will act as a barrier?(8)How to do mass user to role assignment using secatt, will u use su01 or su10?Explain why you will use SU10 not SU01?(9)Can SU10 can be used for mass password reset?Why not?(10)If you want to reset the password for say 100 users in Production how will you do?(11)Expalian Steps 2A and 2B in SU25?

6 Answers   HCL,

what is the alternate tcode for su01?

4 Answers   iGate,

what is routing rule , give one example?

1 Answers   IBM,