Difference between admin and normal user

Hi Community,
how does the user right management works when an admin account is used? In Mac OSX an admin isn't really an admin account because the user become prompted for the (admin) user password again if he require higher privileges. Microsoft implemented since Windows Vista a similar technique, an administrator account works with a normal user token and if higher privileges are needed, the user will get the UAC dialog to grant higher privileges. This is done by providing the user an admin token temporarily.
Is this the same way Mac OSX works or is this done by a different technique?
Thx & Bye Tom

Hi MrHoffman
MrHoffman wrote:
For further reading and improving your knowledge security beyond "root" and "sudo", there are Apple's security guides and the US NSA/CIA operating system security configuration guides. Both of these resources are a little dated, but the underpinnings of the operating system and its security have not changed significantly; what you learn will still be valid, though there can be some features of newer releases (such as the profile manager, the lack of installed Java) that might be useful.
Thanks a lot. The link to the Mac OS security configuration guide seems to be broken but I took a short look into the Linux guide and this is also very interesting, even if I'm not using Redhat but Debian.
MrHoffman wrote:
Wo ist die Diskussion, bitte?
In de.comp.sys.mac.misc but only one posing is interesting:
Message-ID: <[email protected]>
And there is only the problem addressed about the difference between an users login shell and an interactive sub shell and how it could be used for privilege escalation by modifying the $PATH variable to execute malicious code with root privileges. I remember this on earlier days in Linux when the actual directory (.) was at the end of the $PATH variable. This could end in the same issue after all.
Thx & Bye Tom

Similar Messages

Difference between SYS and SYSTEM user

Hi,
Well, one of my colleagues have asked me the difference between SYS and SYSTEM user .. Normally these are the users which will be under the monitoring of the DBA .. So, how could I know the difference between these two users ..
Please assist me
Regards

SYS is the owner of the database and the owner of the data dictionary.
The objects belonging to SYS cannot be exported. But SYS has the SYSDBA privilege which SYSTEM doesn't.
SYSTEM is a privileged administration user, and typically owns Oracle provided tables other than the dictionary.
SYSDBA is not a role, it is a privilege. You'll find it in system_privilege_map, not in dba_roles.

Difference between LIV and Normal Invoice document

Hi Guys,
What is the difference between an LIV invoice and a normal FI invoice document.
Are the entries different or something.
In which cases do we go for LIV invoicing.
thanks
srik.

Hi,
LIV is useful for verifying goods which related to MM. When goods purchased or when received verifying the invoice details like quantity, rate, invoice number etc., PO with the invoice. LIV is linked to FI and MM. But FI inovice is creating only in FI, it no where linked to any module.
Entries are different in both cases.
Regards
Sunil

Difference between Communication and System User

Hello All,
I would like to know the difference between the Communication User and System User.
Definition wise, Yes, I know what they are for?
But My doubt is, why do we need a communication user type for RFC connections when we can use a System user.
Why did SAP designed these two types of users?

It's okay in my books for people to experience the internet as it is and not the way it was individually intended
SU01Solution already solved the problem actually, but there are some very fine peripheral differences still between the user types.
That is why asking a specific question and discussing it's merits / pro's and con's is the best approach and SAP also benefits from it.
Another obvious difference if you do a simple search is that SYSTEM type users cannot issue SAP logon tickets.
There are a few more but as I said these are peripheral and very use-case dependent... so SU01Solution needs to ask a proper and realistic question.
ps: ST01 is not the answer here either...
Cheers,
Julius

Difference between Dialog and Background User

Dear Sap Gurus,
What is the difference between a Dialog user and a Background user. I have asked a specific role to be assigned to Auditors, but the consultants have said that they cannot grant that role because it will give access to very sensitive data. They in turn suggested that they will create a background user with that role.
what is the difference between a dialog user and a backgroud user and how it relates to sensitivity of data ?
Thanks in advance,
Diwakar

Dialog user type is your "typical" user type for people who log in to SAP & use it in their day to day work.
Background user is used to schedule batch & background jobs and basically run stuff in the background (hence the name). The most important thing to know is that you cannot login with a Background user which renders the recommendation of your consultant rather irrelevant and given the required use of it, a demonstration that they may not quite know as much as they profess to do.
Each user type can only do what is defined by it's roles (in most cases). If a role assigned to a dialog user gives access to very sensitive data then it will give the same access to a background user and this is not too hard to exploit.
Furthermore, it is usually expected for auditors to have access to sensitive data (depending on what they are auditing) however they should only be displaying this data. They need no change access, and should not be requesting it, a wide access display role covering functional & technical display roles & access to display table data should suffice for 99% of audits. If someone suggests that this access can only be assigned to a background role then I am surprised unless there are some very specific circumstances.

No difference between High and Normal output sharpening

I was going to post a topic about how small is difference between screen output sharpening settings, when some tests revealed that in fact the difference is nil.
b Can anyone see any difference between Normal and High screen sharpening in applied at export?
I even stacked the two versions in Photoshop with the Difference blending mode on and a Levels adjustment layer amplifying the difference, and even the histogram was showing that I'be got big plain black rectangle.
Sharpening for paper seems to work fine.
Lightroom 2.3 Windows.

Just took the time to test this on my 'calibration' image and there is indeed no difference in Standard and High sharpening for screen.
Same result with and without resizing image; with and without jpeg compression; with both tif and jpeg files.
Lr 2.3 on XP.

Distinguishing Admin and Normal User in Content Database.

Hi,
I am new to Content Database. I am developing an application using the Content DB API's. Can we distinguish whether the logged user is Normal User or Admin User( User with Admin priviliges) with CDB API's.
If so please let me know how it is possible. If it possible with any API please mention the API.
This is very urgent for me. Thanks in advance.
Thank You,
Ravikumar.

Hi Ravi,
simple alternative would be:
try{
//rey to switch to admin mode
sessionManager.setSessionMode(FdkConstants.SESSION_MODE_DOMAIN_ADMINISTRATION, null);
sop("U are an Admin user");
}catch(FdkException ex){
sop("U are not an Admin user");
}

Difference between service and communication user

Hi,
We ran into a big problem in our CRM system getting millions of Dynpro_Send_in_background dumps while processing inbound queues R3AD* from R/3 system to CRM. Lots of Updates getting failed with CRM_SCHEDLIN_UPDATE_DU function module while executing report LCRM_SCHEDLIN_DUU01.
Error Details - CRM_ORDER_MISC 002: Error in updating object SCHEDLIN
We posted to SAP as well but did not find root cause. SAP saying we need to change RFC user "S_ECC_PR0400" from Service user to Communication user, that would stop the dump problem.
I want to know what is the unique difference between these users(Service & Comm) which will resolve the dump problem though I know the common difference between these users.
Thanks
Anju

Hi Anju ,
Communication 'C' User :
Use the user type Communikation for dialog-free communication between systems (for RFC or CPIC service users of different applications, for example, ALE, Workflow, TMS ZBV).
Dialog logon is not possible.
Service 'S' User :
A user of type Service is a dialog user available to a large anonymous set of users. It usually has closely-restricted authorizations.
Service users are e.g. used for anonymous system access via an ITS service. You can change a session which began as an anonymous session with a service user into a personal session under a dialog user with an individual authentification.
There is no check for obsolete/initial passwords at logon. Only the user administrator can change the password.
Multiple logon is allowed.
Hope this may help you.
Thanks
Gyan

Difference between HFM and Essbase user security in 9.3.1 version

Hi,
Could any one explain the differences between Hyperion Essbase and HFM security setup using HSS in 9.3.1
Thanks
Edited by: user10305642 on Jul 13, 2009 12:39 AM

HFM and Essbase security is totally different... HFM uses security classes while Essbase uses security filters.
The way you assign security is also different.
HFM also has more roles than Essbase.
You will find further info in the Security Administration Guide:
http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/hyp_security_guide.pdf
Hiope this helps,
Seb

Difference between UME and LDAP users

Hi,
I am facing a strange problem. In my Webdynpro application, I am accessing the portal user properties using the normal user management APIs. IUser object. On my local server, all the users are UME users and it runs fine.
When I deployed my application on the central server which creates LDAP users by default, the code bombs saying the user is not authorized. When I recreate the user in UME, it is fine again. Are there APIs which I can use which work for both the user stores?
Thanks in advance,
Kiran

Hi Kiran,
I User object works for both the cases. Just try the below code.
<%@ page import = "com.sap.security.api.IUser" %>
     private void getUser() {
          user = compRequest.getUser();
          userId = user.getUniqueID();
          userName = user.getUniqueName();
It worked for me for getting the users from LDAP.
Regards,
Santhosh

What is the difference between abstract and normal class

What will be the difference if I replaced :
public abstract MyWork {
[/code]
by public MyWork { ........
THanks in Advance
Tleis

To clear all that up for those guys:
An abstract class must be subclassed or instantiated as an anonymous class. It can have any of the same members as a regular class and in addition it can define abstract methods. Any abstract methods must be implemented by the subclass or else that class too must be declared abstract.
An abstract class is different from an interface. Java gives you only a single ancester in your class hierarchy. You will force an implementation to become a descendant of your abstract class -- and therefore no other. In "object oriented programming", the term "an 'is-a' relationship" is used to describe that relationship between any subclass and its superclass. However you like to put it: this is the relationship you will be defining when you write your abstract class.
- Steev.

Difference between Downpayment and normal invoice in updating BSEG table

Hi,
I created 2 different documents, 1 invoice via FB60 and 1 downpayment request between F-47.
After which i perform a payment run via F110 on both documents and i realised that the bank account id for the document created via F-47 is not updated in the field HBKID for the BSEG table. However, HBKID is updated for the invoice created via FB60.
I would like to if this is correct or if there is any config i need to perform for the HBKID field to be updated for document created via F-47.
Thanks in advance.

Hi,
Please, look at the following note 524942. It should solve your problem...
Regards,
Eli

What is the main difference between menu_exits and user_exits

what is the main difference between menu_exits and user_exits

Hi,
User Exits:
A user exit is a three character code that instructs the system to access a program during system processing.
SXX: S is for standard exits that are delivered by SAP. XX represents the 2-digit exit number.
UXX: U is for user exits that are defined by the user. XX represents the 2-digit exit number
Menu Exits:
Menu exits add items to the pulldown menus in standard SAP applications. You can use these menu items to call up your own screens or to trigger entire add-on applications.
SAP creates menu exits by defining special menu items in the Menu Painter. These special entries have function codes that begin with "+" (a plus sign). You specify the menu items text when activating the item in an add-on project.
Regards,
Priyanka.

Security Profiles - Difference between SYSTEM and TENANT admin user?

Hi,
In the OnDemand Enterprise workbook, some defualt security profiles have been configured. This includes one called 'Tenant Admin'. When I look in the system there is also a profiule called 'System Admin'. Could somebody please explan the differences between system and tenant regarding these profiles? I assume we shoul drarely use System Admin, and Tenant Admin is the safer option?
Thanks
John

Hi,
As you mentioned there are 2 status can be maintained for documents like Equipment Master, Notification, Maintenance Order & other important business documents.
In case, client feels that system status is not enough to capture the details of the object, then user status can be used.
System statuses will be updated automatically based on business transactions which will be done on SAP.
For example, once the equipment is created, System status would CRTD (Created). If you install the same to some superior equipment or FL, then status would be INST (Installed).
If you keeping that equipment in Spare, then for that, you have to maintain separate User Status like AVLB (Available in Stock / Spare) so that through IH08, by using User status, you can the report which is available as spare.
These user status as per the name, should be updated by the user manually.
Regards,
Maheswaran.

Differences between archiving and inactivating a qualitative lookup within the Data Admin toolkit.

Hi,
Can you please let me know what could be the difference between archiving and Inactivating the Qualitative Lookup in Data Admin Tool Kit.
Thanks,
Rohini M

When you inactive or archive something it is no longer available for selection.   The difference between inactive and archive is that inactive items will still appear available for searching purposes while archive items will not.
So lets say you have the following:
List A
   - Item 1
   - Item 2
List Items
If you were to inactivate Item 1, end users would no longer see it available for selection when using the qualitative extended attribute. However when they search for specs based on the extended attribute they would still be able to select Item 1 so they could find objects that used that value. If you were to archive Item 1, end users should no longer see it available for selection anywhere - including searching.
Lists
If you were to inactive or archive the entire List A, you would no longer see it available for selection when setting up qualitative lookup extended attributes.   I don't think there is anywhere you can search for extended attributes by lookup list currently out of the box so these would act similar. If there was a place to search for extended attributes by lookup list then it would follow the same rules as above.

Difference between admin and normal user

Similar Messages

Maybe you are looking for