Best SAP Security Practices Print,file,job schedule, archiving
Hello All, i would like to know in your experience which will be the best practices for Security for this list below:
- Printer security (especially check printing)
- File path security for export/import
- Best Practice for Job Schedule and Spool file
- Archiving process (I can't think of any specific to security, other than Security Audit Logs)
Are there any special transactions/system settings/parameters that must be on place in order to hard SAP Systems?
Do you have any documentation related?
I mean for example Job, spool i think user must just only run heir own jobs,and se their own works for printing, is there a paremeter to athenticate Prints/user, etc.
Please let me know your comments about those related issues.
I appreciate your help.
Thanks a lot.
Ahmed
Hi,
PFCG_TIME_DEPENDENCY
This is best to run once a day mostly after 12.01 am as it removes the roles which are invalid for current date. As role assignment is on date basis there is no advantage of running it hourly.
/VIRSA/ZVFATBAK
This is for GRC 5.3, and this job is to collect FFID logs from backend to GRC repository, so if you have frequent FFID usage you can schedule it hourly or for every 30 min too, if you have enough bandwidth in your server to get the latest log report. or else you can have it scheduled for twice a day too, so it is purely based on your need.
Hope this helps.
BR,
Mangesh
Similar Messages
-
SAP- PM workorder printing - batch job
Hello Friends,
Does anybody know the process of SAP- PM work order printing in batch job?
Please help.
Thanks & Regards,
VaibhavThnaks for your suggestion we checked the program as per your suggestion but we are not getting the prints of PM orders. We think that program is for PP orders as it is selecting the PP orders only after some modification. Do you implemented that if yes then could provide some tips to execute that program.
BR,
Vaibhav -
OEM Job schedule definition to Flat file
Can anyone advice me on the best method of extracting a OEM Job schedule definition - from an existing OEM server - to a flat file executable deployment script i.e. SQL*Plus script, schell script e.t.c.
Your help will be most appriciated.Thanks for your response. Is this fuctionality usable after OEM Job creation?
Message was edited by:
kayvic01 -
What is the best practice in securing deployed source files
hi guys,
Just yesterday, I developed a simple image cropper using ajax
and flash. After compiling the package, I notice the
package/installer delivers the same exact source files as in
developed to the installed folder.
This doesnt concern me much at first, but coming to think of
it. This question keeps coming out of my head.
"What is the best practice in securing deployed source
files?"
How do we secure application installed source files from
being tampered. Especially, when it comes to tampering of the
source files after it's been installed. E.g. modifying spraydata.js
files for example can be done easily with an editor.Hi,
You could compute a SHA or MD5 hash of your source files on
first run and save these hashes to EncryptedLocalStore.
On startup, recompute and verify. (This, of course, fails to
address when the main app's swf / swc / html itself is
decompiled) -
I can no longer print to the 3 Canon printers on my local area network. The print dialog box states that the print file is accepted and the job is printing, but the files never print. Everything worked when the computer and printers were initially set up.
There may be some security issues related to the USPS PDFs.
http://www.certified-mail-envelopes.com/signatures-usps-certified-mail-return-receipt-requested
I can't help with the scan/print problem. You seem to have done everything I would try.
I don't know if maybe using a registry cleaner would help.
John Hoffman
Conway, NH
1D Mark IV, Rebel T5i, Pixma PRO-100, MX472 -
Creation of File through Scheduled Batch Job
Hi Friends.
How to create a file through scheduled batch job .ie data has to be sent in particular file which should be stored in SAP so that The file is expected to provide quick reconciliation when data in SAP gets archived .
With thanks and regarsds
UmaWhich part? The creation of the file? Since running in background, you would need to create the file using DATASET statements on the appliation server. You will not be able to put the file on any frontend PC or server, only on the application server where you program is running.
Regards,
Rich Heilman -
SIS package works in development environment but fails when job scheduler executes, file path invalid
Relatively simple package to get OLE-DB connection to MS FoxPro 9.0 DB
The failure in the job log states that the path is invalid its a network path (\\192.168.1.xxx\foldername) this has been run several ways with the remote computer being mapped as a network drive and through the \\ notation described above.
Thinking it was a security issue between the SQL agent account and my account I tested by subsitution myself as a proxy account for the agent when running this job, again same result failed on network path.
One issue I see is that the remote computer is running Server 2000 (legacy software incompatable with newer versions)
Is it possible that this is a security issue, since if i understand correctly the current MS domain security model didn't exist until Server 2003.Hi REIData,
Have you got the issue resolved? Based on your description, please make sure the target folder is shared properly. If the computer on which the SQL Server Agent job runs doesn’t join the domain as the server that hosts the shared folder, you have to share
the folder with everyone by adding “Everyone” to the people list on the File Sharing page of the folder and assign "Read/Write" permission to it.
Regards,
Mike Yin
TechNet Community Support -
Configuration Guide Job Scheduling Management with SAP Solution Manager
Dear Gurus
Could you please help me with the configuration guide of the Job Scheduling Management with SAP Solution Manager
Best RegardsHello Luis,
the configuration activities can be accessed via the "Implementatiopn Guide" by calling transaction SPRO in your SAP Solution Manager system.
In SPRO navigate to -> SAP Solution Manager -> Scenario-Specific Settings -> Job Scheduling Management -> Standard Configuration and execute the following two activities.
1. Activate Solution Manager Services
2. Set Up Work Center for Job Scheduling Management
Make sure that your user has role SAP_SM_SCHEDULER_EXE (or_ADMIN) assigned.
Afterwards you should be able to access the Job Management Work Center and to create Job Documentation or to import Jobs from a Managed System into new Job Documentations.
The following SAP notes might be usefuly as well:
1054005 - FAQ on Job Scheduling Management
1117355 - Work Center roles
Kind regards,
Martin
http://service.sap.com/jsm -
Job Scheduling tool with SAP SolMan
Hi Experts,
Please advise on among Autosys, BMC or Redwood , which one is the best to work with Sol Man in job scheduling purpose.
ThanksHi Preema,
I would strongly recommend Redwood since it integrates with all SAp components including Solman.
- Bhushan -
Job Scheduling Management vs SAP CPS
Hi Guys
I am trying to find out what are the differences between using the Job scheduling management tool in Solution manager and SAP CPS integrated into Solution manager. What are the benifits of using CPS as opposed to using the "standared" job scheduling tool.
santoshHello Santosh,
the link that you already got is good. Perhaps you also want to check out [http://wiki.sdn.sap.com/wiki/display/SM/FAQJobSchedulingManagement|http://wiki.sdn.sap.com/wiki/display/SM/FAQJobSchedulingManagement] and [SAP is first vendor to provide a comprehensive Job Management Suite |SAP is first vendor to provide a comprehensive Job Management Suite] for further information.
In short SAP CPS is an advanced scheduling tool like which competes against other like UC4, Control-M from BMC etc. But all these tools do not provide any real job documentation or job request functionality in order to get the process governance right. That's where the SolMan gets into the game.
Best Regards
Volker -
Regarding Background Job scheduling for file to file scenario
Hi Guru's
Good morining all of u
I have one doubt on ...
can we do background job scheduling for file to file scenario?
Please give me response as early as possible.
thanks and regards
saibackground jobscheduling for file adapter...
you can schedule the file adapter according to your requirement as follows:
In the Communication Channel Monitoring Locate the link Availability Time Planning, In Availability Time Planning, choose the Availability time as daily and say create, give the time details, select the communication channel in your case file adapter , goto the Communication Channels tab and filter and add the respective channel, save it
/people/shabarish.vijayakumar/blog/2006/11/26/adapter-scheduling--hail-sp-19- -
What are the best security practices for your forms and databases
What are some of the best security practices to follow to
ensure your database isn't attacked with injections, forms abused
with snippets of code, and mass spam DB inserts on your
forms?On Sat, 29 Mar 2008 17:17:01 +0000 (UTC), "jsteinmann"
<[email protected]> wrote:
>What are some of the best security practices to follow to
ensure your database isn't attacked with injections, forms abused
with snippets of code, and mass spam DB inserts on your forms?
David Powers books on php for Dw give detailed advice on how
to do
forms, first with html, and then validate them with secure
php
scripts.
http://foundationphp.com/
~Malcolm N....
~ -
Creation of file through batch job scheduling
Hi friends,
I have a situation where I need to select vendor / customer and after that I need to select one of the option between invoice or payments when User select vendor then it should create a file through schedule batch job .
I am not getting how to do it .
Please help me if any one knows about it.
Thanks in advance.
GauravWhich part? The creation of the file? Since running in background, you would need to create the file using DATASET statements on the appliation server. You will not be able to put the file on any frontend PC or server, only on the application server where you program is running.
Regards,
Rich Heilman -
Sending log files for scheduled jobs as attachment through mail
Hi All,
Can any one please help me out to write a pl/sql program to send log files for scheduled jobs as attachment through mail.
Thanks.Why would anyone do that as this code has already been posted here a thousand times, it is all over the Internet, and the only thing you need to do is to search for it?
I agree it would cost you some effort, but you are getting paid for it, and we are not getting paid for delivering it on a golden plate on your doorstep, as you can not be bothered to use online resources.
Sybrand Bakker
Senior Oracle DBA -
Hi ,
Can i know , in Ep5.0 , what jar file has com.sap.security.api ? Please reply soon...
Thank you ,
avinashso , is there a procedure for me to use the Ep5.0 API and retrieve details from the data sources (for usermapping) ?
Please reply me soon....
thank you,
avinash
Maybe you are looking for
-
How to convert date format dd.mm.yy into yyyymmdd?
Hello experts, how to convert date format dd.mm.yy into yyyymmdd? Thanx Axel
-
Default Adapter with SAP PI 7.1 EHP1
Hi, Thanks for an overwhelming response to all my questions. I need some information about the SAP PI 7.1 tool. The information needed is as following 1. How many default adapter we get with SAP PI EHP 1 package? 2. If we need some special adapters w
-
Hi! I have a w2000 server and a SQL server 2000 Sp4. The version of SAP is 4.6C SR2. When i'm trying to export the database with r3load, it gives me DBEXPR3LOADEXEC_NT_IND error after almost 10 hours of process. I don´t know the cause of the prob
-
Can you right click on ipad 2 and if so how
can you right click on ipad 2 and if so how
-
I just got a new mac book air. I want to download and install photoshop cs5 on the new laptop. I already have purchased it and have it installed on my iMac desktop. I tried moving my copy of PShop CS4 from my old mac book, but got an error code 1