A collection of threads: FAQ's, intros and memorable discussions

Question

Welcome to the SDN Security Forum!
In addition to the information accessible via the SDN Security Main Wiki and the SDN Security Forum Search and
searching the SAP Service Marketplace (see the thread on OSS Note Search Techniques), this "sticky post" lists some threads from the forum as:
- an introduction for new members / visitors on topics discussed in threads,
- a collection of some threads which provided usefull answers to questions which are frequently asked,
- a collection of some memorable threads if you feel like reading some security related material.
- a collection of OSS notes which have been proven to be generally usefull to know about.
The listed threads will be enhanced from time to time. Please feel welcome to contact me via the details in my SDN Business Card if you would like to suggest any threads for inclusion here.
Keeping an eye on the SDN Security Homepage for relevant blogs (often there are security aspects to other blogs as well),
the Security Area of the SAP Service Marketplace ("OSS" logon required) and subscription to the SAP Security Newsletter
can also be generally recommended if you are interested in security.
New!Also see SAP's Security Disclosure Guidelines and do not use SDN to report software bugs. Contact details are in the link.
PS: When asking a question in the forum, please also provide sufficient information such that the question can be
answered usefully, and when the question is answered please indicate which solution was found and close the thread.

Answer 1

Identity Management
CUA will never die! => Blog from SAP about CUA support myths.
CUA information and advice needed!!! => There is a seperate dedicated forum for this now.
User Management and Password Rules
User Comparison => PFUD and "valid to" role assignments, and other search terms.
Effect of Keeping User IDs => Why and how to avoid deleting user ID's.
FORCE PASSWORD CHANGE => Think twice about updating SAP tables.
ALEREMOTE ID locked by KRNL => Where did a (CaSe-sensitive) password come from and why did it fail?
DDIC and changing ownership of Jobs => Restricting DDIC access and logging, by restricting it's use.
Copy User Masters from 4.7 to ECC 6.0 => Old hats, new (easy) tricks and win a round of beers, instead of points
Profile Parameter: login/password_logon_usergroup => Exceptions, development requests and analzing logon problems.
Authorizations
Trace => Contributing to SDN can enable a difference for everyone, depending on the reason code ...
Security Design => Derived roles, role design and (potential) design errors.
F110 - S_BTCH_ADM => S_BTCH_ADM vs. S_BTCH_JOB.
How to securize SE16N => Be carefull with S_DEVELOP authorizations, regardless of S_TCODE.
Giving authorization for img => Tcodes, activities and projects within SPRO.
Role and Naming concpets => Important first step with lasting consequences.
display access for the tcode SCC4 => Tweaking table auth groups with transaction SE54.
No control over workbench tcode start => The "System => Status and F1 trick"; also see SAP note 1085326.
Is SU24 only for removing security checks? => What the SU24 indicators are for.
Effect of "changed' objects during upgrades => The rules of SAP note 113290.
How to remove SPRO from SAP_ALL profile => The Neverending Story.
How to create new org.level and further actions? => Reports for converting organizational level fields.
Granting Authorization Group SC in S_TABU_DIS => New authorization object S_TABU_NAM to access individual tables.
error while uploading roles from quality to production => Upload roles, or transport them.
SUIM RSUSR010 does not return completed list of t-code. => Special SUIM reports explained by SAP guru Bernhard Hochreiter.
Maintaining different values for Accounting Type (KOART) => A little bit of everything in PFCG which you need to know.
Adding Object Mannully Vs. Adding Object in SU24 for Tranaction => When to use SU24 to make changes.
Too many duplicate objects coming while adding Tcode through MENU => SU24, PFCG merge option and role design.
Not add authorization objects that exist in role when adding transaction => Initial installation tuning of SU24.
Do you give SAP_ALL and SAP_NEW to developer in Dev and QA environtment? => Developer type authorizations.
Errors occurred during post-handling PRGN_AFTER_IMP_ACTGROUP_ACGR for ACGR => Solutions for profile name collisions.