Gung Ho security team vs Debug with replace in development

Hi fellow developers. I'm trying to talk our security team off the ledge and I want to conduct an informal poll regarding the responsible use of debug with replace in a DEVELOPMENT environment. For the newer developers.. replace is much more powerful in debugging because you can change the values of variables and some system fields like sy-subrc which makes it very powerful.
Our development environment is setup as follows:
Client 300, ABAP Development \config. We promote to QA, and Prod from here but can't unit test because no data allowed. Debug with NO replace allowed here.
Client 320 Unit testing, debug with replace is allowed.
both of these clients are on the same instance, same sid so they share client independent information.
Our security team claims that it's a security risk to allow debug with replace in our Client 300 because someone could change a security profile or something like that. Here's my question...
Are you authorized to debug with replace in your development environment and if not, what's the reason you were given? I'm looking for arguments one way or the other to use as precedent for a meeting.
Your prompt response is appreciated.
Dan

Hi
I think the option can be dangerous in QA or PROD system because you can skip some control and change the data normally can't be changed.
A classicl example is trx SE16: by debug you can change directly the data of the most of tables.
But I don't believe can be a risk in development system, in this enviroment the developer should have no limit, otherwise to work and test can belong very hard.
Max

Similar Messages

How do I apply SAP's mantra, "Run Like a Factory" to my Basis/Security team?

I will preface this by stating that I am a newbie to SAP, and I am not technical. Currently I manage a Basis/Security team, albeit understaffed.
For the past 5 years I have been charged to:
Organize the team into a highly-performing department. (Done!)
Leverage existing SAP (and non-SAP) tools to drive up the performance and availability of our SAP landscape. (Currently on SolMan 7.1, SP12. Early Watch reports for 17 instances. Crank out CQC's like they are free candy)
Take full advantage of our SAP Enterprise Support. (Monthly calls with our Ent. Support Advisor. Burn through our EGI's, AEI's, and Road Maps. Training curriculum built around the Ent. Support Academy offerings, etc.)
But there is a part that is missing, and this is where I need guidance. What I am referring to is the integration and synchronization of my team with the abundance of proactive services of SAP's MarketPlace (MP) and Enterprise Support (ES). Here is what I mean:
So I am subscribed to umpteen SAP "MP" & "ES" newsletters and RSS Feeds, I occasionally browse the Security Portal (because I can't find where to subscribe to an RSS Feed), I receive the "SAP Support Notification" email every couple of days, I am connected to their Social Media presence,and there are a few other communication channels I am connected to. But from all of this what I am missing is... Continuity!
I have had this nagging feeling that I am missing, or not yet fully aware, of some basic elements within the "MP" or "ES" that I need to address so that the steady flow of information from these channels are relevant and substantial. Here is my best example:
Every few days I receive the "SAP Support Notification" email. At first the email was basically empty. I figured out that I had to choose my instances within my subscription so that I receive relevant information. I accessed my instance list and found it was a mess. So I had my architect remove all obsolete instances. The contents of the email is now more substantial, but there is more to the email that I don't understand the relevance of.
Another example is the SAP Security Portal. I can't figure it out. Updates, announcements, etc. aren't sent out. I have to remind myself to visit the Portal.
I have a few more examples, but this post is already too long. I need help with the manipulation of the basic elements of "MP" and "ES" to start receiving more substantial, and actionable, proactive support. Once I have this I can integrate this support into the daily administration of my SAP ecosystem, as well as define KPI's and metrics to strive for improved performance and availability.
So what am I missing?

Hi Pete,
This is a great discussion item, and I am glad that you brought it up! There is a lot of information out there, and how to syphon it so it relates to you is definitely something that is important.
Couple points/questions on the above, and then some information that may help future wise.
There are many notifications within the SAP Support Portal that you can subscribe to. Some require filters, some are based on 'subscribing' to Spotlight News or to specific notes and KBAs. Happy to set up some time with you to go through these in detail.
What is the URL to the SAP Security Portal you mention? Are you referring to this area: https://support.sap.com/kb-incidents/notifications/security-notes.html?
Future direction is focusing on personalizing your experience within the portal. Giving you what you need, when and how you prefer. We can chat on that as well.
Feel free to reach out to me directly.
Cheers,
Kristen

Is my HD Dead? Reformat Disk Utility Error: secure disk erase failed with the error could not open disk.

Hi,
Fed up with seeing the spinning beach ball I decided to reformat my MacBook Pro...
After backing up everything on an external hard drive I put in the OSX install DVD, restarted the machine and held down 'C'.
I followed the install prcedure, clicking next a few times etc...
I then went into Utilities > Disk Utility. I chose 7-Pass to erase the Macintosh HD and set it off erasing.
I checked the process an hour in and message on screen read:
Secure disk erase failed with the error:
could not open disk
The internal hard drive no longer exists in the disk utility so I cant retry erasing it.
The only thing that appears in disk utility is the OSX install DVD.
I can't even shut down the mac as everything under the apple tab is greyed out!
I'm guessing this means my hard drive is broken right?
If anyone has any other ideas of what to try I'd really appreciate that.
How do I turn the machine off?
If my hard drive is gone then should I consider getting an SSD drive?
Any recommendations for such a drive would be great.
Hope you can help!

Did you partition the drive?
Extended Hard Drive Preparation
1. Open Disk Utility in your Utilities folder. If you need to reformat your startup volume, then you must boot from your OS X Installer Disc. After the installer loads select your language and click on the Continue button. When the menu bar appears select Disk Utility from the Installer menu (Utilities menu for Tiger or Leopard.)
2. After DU loads select your hard drive (this is the entry with the mfgr.'s ID and size) from the left side list. Note the SMART status of the drive in DU's status area. If it does not say "Verified" then the drive is failing or has failed and will need replacing. SMART info will not be reported on external drives. Otherwise, click on the Partition tab in the DU main window.
3. Click on the Options button, set the partition scheme to GUID (only required for Intel Macs) then click on the OK button. Set the number of partitions from the dropdown menu (use 1 partition unless you wish to make more.) Set the format type to Mac OS Extended (Journaled.) Click on the Partition button and wait until the volume(s) mount on the Desktop.
4. Select the volume you just created (this is the sub-entry under the drive entry) from the left side list. Click on the Erase tab in the DU main window.
5. Set the format type to Mac OS Extended (Journaled.) Click on the Options button, check the button for Zero Data and click on OK to return to the Erase window.
6. Click on the Erase button. The format process can take up to several hours depending upon the drive size.
Steps 4-6 are optional but should be used on a drive that has never been formatted before, if the format type is not Mac OS Extended, if the partition scheme has been changed, or if a different operating system (not OS X) has been installed on the drive.

Anyone received fraudulant email from iCloud Security Team?

I got this really basic email from the "iCloud Security Team" asking me to update my account to protect against third-party access. The link (when I mouseover it) shows no Apple in it. I can't find a way to forward this to Apple so they can investigate who is trying to use them for information extraction.

See "What to do with suspicious emails" here: http://support.apple.com/kb/HT4933.

Any ideas on restricting userID Role Assigment within the SAP Security Team

Hello,
I have gotten a request to look into restriction of assignment of roles to oneself within the company SAP Security Team. Thoughts I have come up with so far involve the use of UserID User Groups, Role Assignment Ranges, and forcing all role assignements for all userIDs through GRC-AC CUP for QA and Prod. Has anyone come up with a workable solution that is outside of these suggestions that they have put into practice?
Thanks in advance for your help!
John

Hi John,
There can be a manual control in place and individual should not assign role/s to himself / herself.
Otherwise, security team members can be assigned to a specific group (let say Security) and they shouldn't have access to authorization S_USER_GRP with ACTVT 22 & CLASS - Security.There should be a dedicated power user to assign the role/s to the security team members and this can be auditted (SM20 log for manual super user / FireFighter log for FireFighter user).
Thanks
Prasanna

Steps to contact Account Security Team

Hi All,
These are some simple steps which might help in contacting the Account Security team when required. You can follow the same :
STEP 1 : Follow the link : Apple ID: Contacting Apple for help with Apple ID account security. The webpage will look as shown below. You would need to click on "Start your support request" if available, or use the phone number to contact the corresponding team for the respective country.
STEP 2 : After being redirected to the new page, you need to click on the option "Forgotten Apple ID Security Questions".
STEP 3: An option will show up and you will need to click on the blue "CONTINUE" box in order to proceed.
STEP 4 : You will be redirected to a new webpage, which will have the options, "Talk to Apple Support now", "Schedule a Call" and "Call Apple Support later". You can choose any one of the options suitable to your timeframe.
STEP 5 : On Selecting "Talk to Apple Support Now", you will be asked to fill out the details as shown below :
STEP 6 : If you select "Schedule a Call", you will be presented with slots of Day and Time which might be suitable for you get a callback from our Account Security Team.
You can follow the steps provided above in order to contact the Account Security Team.

OK, and what is the question you would like us, your fellow users, to help you with?

I can't cantact the account security team

I can't cantact the account security team for enable my apple id (Thailand)
I recieved your customer support email and we try to solved this problem since early of january. I try so many times to call 001800 4412904 (and even another country contact number) but nobody answer.Then I leaved you a message to call me back.And nothing happen again. Now I still can't enable my apple id
Please your team helps me as soon as possible?

On Wednesday mid- to late-afternoon [Eastern Standard Time] I spoke with Steve, who works with Apple in Toronto. Steve is trying to resolve my problem with _only_ trying to get Mavericks.
I am just a user of an iMac. I don't have _any_ technical knowledge that would help you, yuilzung.

How I can contact mozila website security team?

Hello everyone,
My name is KOUTROUSS and I'm a security researcher . I'm just wanna inform you that I have discovered a issue (XSS vulnerability) in mozila website "http://mozila.org". and this issue guys can use it to hack accounts of the users of your website "http://mozila.org", and phishing the users to other links to stole accounts by the name of your website,cookie.....
So guys Can you told me the eamil of mozila website security team?

"mozila.org" is not currently controlled by mozilla.org, but appears to be someone domain squatting.
Assuming you have made a typo and you meant mozilla.org, cor-el is correct with the following link:
* http://www.mozilla.org/security/
Quoting from the link above:
If you believe that you've found a Mozilla-related security vulnerability, please report it by sending email to the address '''[email protected]'''. Note that your report may be eligible for a reward; see below. For more information on how to report security vulnerabilities and how the Mozilla community will respond to such reports, [http://www.mozilla.org/security/bug-bounty.html see our policy for handling security bugs].

Debugging with JDeveloper 2 with JDK 2

Oracle Jdev team,
I am running jdeveloper 2 (JDK 1.2), build 343. Whenever I
attempt to debug an app i get this error dialog:
Cannot debug project with Target JDK 'java
version "JDK1.2_JDEVELOPER'", can only debug with Target
JDK 'java version "1.2"'.
My Project Properties Target JDK Version is pointing to the java
1.2 java.exe that came with Jbuilder.
Path of java.exe
D:\Tools\JDeveloper20\java1.2\jre\bin\java.exe
Classpath
D:\Tools\JDeveloper20\java1.2\jre\lib\rt.jar
Sourcepath
[D:\Tools\JDeveloper20\java1.2\src.jar]\src\
I've attempted to use various 1.2 jdks to get the debugger to
work, but always with the same version.
The project began as a JDK 1.2 project (did not attempt to
switch from a jdk 1.1.x project).
I;m sure you've seen this before, what am I doing wrong???
THanks in advance, Peter
null

I have the same problem but even wierder.
When I try to debug my project JDeveloper says
Cannot debug project with Target JDK 'java version
"JDK1.1.7_JDeveloper'", can only debug with Target JDK 'java
version "1.1.8'".
I do indeed have such a Target JDK defined, but I have not
compiled anything in the current project with that. In fact I
haven't switched JDKs at all in this project, nor in this
workspace.
What gives?
Markus Burle (guest) wrote:
: JDeveloper Team (guest) wrote:
: : Hi
: : JDeveloper allows to use different JDK's but the debugger
only
: : works with JDK's that come with JDeveloper. If you are
pointing
: : to a JDK outside it will still work but the debugger will be
: : disabled.
: : regards
: : raghu
: The original poster (see below, marked with an X) IS using the
: JDK that comes with JDeveloper. I'm also using it and have the
: same problem.
: Markus
: : Peter (guest) wrote:
: : : Oracle Jdev team,
: : : I am running jdeveloper 2 (JDK 1.2), build 343. Whenever I
: : : attempt to debug an app i get this error dialog:
: X : Cannot debug project with Target JDK 'java
: X : version "JDK1.2_JDEVELOPER'", can only debug with Target
: X : JDK 'java version "1.2"'.
: X : My Project Properties Target JDK Version is pointing to
the
: X java
: X : 1.2 java.exe that came with Jbuilder.
: : : Path of java.exe
: : : D:\Tools\JDeveloper20\java1.2\jre\bin\java.exe
: : : Classpath
: : : D:\Tools\JDeveloper20\java1.2\jre\lib\rt.jar
: : : Sourcepath
: : : [D:\Tools\JDeveloper20\java1.2\src.jar]\src\
: : : I've attempted to use various 1.2 jdks to get the debugger
to
: : : work, but always with the same version.
: : : The project began as a JDK 1.2 project (did not attempt to
: : : switch from a jdk 1.1.x project).
: : : I;m sure you've seen this before, what am I doing wrong???
: : : THanks in advance, Peter
null

Error while creating a Characteristic Variable with Replacement Path

Hi all,
    I am trying to create the Characteristic Variable ZVLOWDT (Low Date') with Replacement Path on characteristic ZSTARTDT (Start Date) and it gives the error 'Source to replace 'Low Date' is not defined.
   I have created a User Entry Variable VAR_DATE (Start Date) with interval like '01/01/2009 - 01/15/2009' and Customer Exit variable ZVCPDAY (does some calculation based on the input of VAR_DATE) on the same ZSTARTDT characteristic. I want to get the 01/01/2009 (lower range date of the selection) into this Characteristic Variable ZVLOWDT. We are in BI 7.0 and the following are it's properties:
General Tab:
Description: Low Date
Technical Name: ZVLOWDT
Type of Variable: Characteristic Value
Processing by: Replacement Path
Reference Characteristic: ZSTARTDT Start Date
Details Tab:
Variable Represents : Single value
Variable is: Mandatory
Variable is Ready for Input : unchecked
Replacement Path Tab: Replacement Rule
Replace Variable with : Variable
Variable : VAR_DATE
Replace with : KEY
Why I am getting this error, PLEASE ?
Thanks,
Venkat.

Hi Khaja,
   We could derive a Variable value from another Variable with out Customer Exit. There is a white paper.
First have the User Entry Variable (ZV_X) and it accepts the date range like '01/01/2009 - 01/31/2009'. Next create the Characteristic variable (ZV_Y) of Replacement Path for which source variable will be ZV_X and we could get the 'FROM Date' (01/01/2009) from the selection (ZV_X) into it (ZV_Y).
While creating the Characteristic variable (ZV_Y) of Replacement Path, I didn't find my newly created ZV_X variable in the list of available variables under 'Variable' header in 'Replacement Path' tab and it is causing the error 'Source to replace variable ZV_Y is not defined'. How could I create the Characteristic variable of Replacement Path, PLEASE ?
Thanks,
Venkat.

BW 3.5 - Issue with formula variable with replacement path

Dear experts,
I'm facing an issue with formula variable with replacement path.
Just to clarify, I know replacement paths is raising a lot of questions but I've been using this functionnality extensively in the past, both in 7.0 and 3.5, so I'm not looking for basic information about how to use it.
I'm trying to setup a simple report that would show total values per plant of Purchase Order < 100
To do so I've setup a calculated key figure as follow:
VAR1 * ("PO value" < 100 ) * "PO value"
VAR1 is a formula variable with replacement path on 'purchase order' and value attribute 'constant =1'.
(The report has to show values summarized by plant but should not show the detail PO by PO, so I'm not looking at a solution based on condition)
The report as characteristic "plant" in rows and my CKF in columns.
Now let's take an example. I have 3 POs in Plant 1:
PO1 -> 150
PO2 -> 90
PO3 -> 80
Because of the variable with replacement path, the result in my query should be:
plant1 = 170 (even though characteristic "purchase order" is not in my rows, system should evaluate PO one by one and return values only for those two that are below 100).
But the result coming is 320, which is wrong.
I've done the same report on many other 3.5 systems and it worked perfectly, and I am not able to get proper support from SAP OSS who keep saying that this functionnality is not ready in 3.5 (although I've provided screenshot of this working on another 3.5 system!!! how frustrating...)
They have also pointed to problems of Before and After aggregation but that has absolutely no impact. Once again, the scenario is working perfectly on other 3.5 systems with the same query design, so i'm sure it has nothing to do with Query Designer options.
Would anyone have ever come to an equivalenet problem? I'm wondering whether the DB itself could not play a role in the variable with ref characteristic 'constant =1' ...
Any though is welcome!
thanks

Hi,
The text variable is replaced when the exact date is clear for this key figure column according to the restriction.
To achive this, please make sure that either the variable is directly restricted in the key figure selection, or that the date characteristic is in drilldown.
Regards,
Patricia

Variable with Replacement Path

Hi, I have two queries. The results of the first one should be the input for the second one. E.g. the first query shows a list of personnel numbers and additional information. These personnel numbers shall be overtaken by the second query. The personnel numbers belong to "Dimensions" in the Query Designer. I alread tried to create a variable with replacement path to the dimension personnel number. I implementet this variable in both the first and the second query (under: "rows"). It`s no "Formular variable" and no "Calculated Key Figure" but a "Characteristic Value Variable" of a Dimension. The problem is now that I cannot execute any of the two queries. The error "Abort the query cannot be released for OLE DB for OLAP. System error in programm CL_RSR_REQUEST and form PREPARE_VQUERIES:INVALID_
What is my mistake? Thank you in advance! Eve

Hi Eve,
It is possible to connect the 2 queries using a Replacement Path characteristic variable. You would need to create the variable on the char whose values you want to pass from Q1 to Q2. The variable will be of type replacement path and you will need to enter the name of Q1 from which it will get the values. Make sure that you include this char in the query definition of Q1 and Q2. In Q2 you will restrict the characteristic using this variable. DO not use this variable (replacement path) in Q1.
In your query properties check if you have turned on the checkmark for Release for OLE DB for OLAP (3rd tab). If the check mark is there, then remove it.
We are using the scenario in a couple of places, and it works very well.
Hope this helps...

Creating Variable with Replacement Path to get value from ANOTHER Variable

Hi all,
    Is anyone has created the Variable with Replacement Path to get the value from another User Entry Variable, PLEASE ?
First created the User Entry Variable (ZV_X) and it accepts the date range like '01/01/2009 - 01/31/2009'. Next created the Characteristic variable (ZV_Y) of Replacement Path for which source variable will be ZV_X and we should get the 'FROM Date' (01/01/2009) from the selection (ZV_X) into it (ZV_Y).
While creating the Characteristic variable (ZV_Y) of Replacement Path, I didn't find my newly created ZV_X variable in the list of available variables under 'Variable' header in 'Replacement Path' tab and it is causing the error 'Source to replace variable ZV_Y is not defined'. How could I create the Characteristic variable of Replacement Path for my requirement, PLEASE ?
The following is from help.sap..com:
Replace with Characteristic Value
Text and formula variables with the processing type Replacement Path can be replaced with a corresponding characteristic value. In the variable editor, on the General tab page, you specify under Reference Characteristic the characteristic that is to be referenced by the replacement. On the Replacement Path tab page, you can choose whether the variable is replaced with the From or the To Value and with the Key or the Name of the characteristic value. You can also specify the Offset Start and Offset Length for the output.
Replace with Variable
Characteristic value variables, hierarchy variables, text variables, and formula variables with the Replacement Path processing type can take their values from a different variable.
The following prerequisites need to be fulfilled:
Variable
●      The variable must not be input-ready
●      The variable must represent a single value
Source Variable
●      The source variable must not be a hierarchy node variable
●      The source variable must be input-ready
●      The source variable must be available in the query
●      The source variable must represent a single value or an interval
In the variable editor, on the Replacement Path tab page, you specify the source variable from which the value is to be determined. The value is either determined from the key, the external attribute of the key, the description, or the attribute value. You can specify an Offset Start and an Offset Length for the output here. The variable is replaced on the variable screen upon each data release.
Thanks,
Venkat.

Hi Eve,
It is possible to connect the 2 queries using a Replacement Path characteristic variable. You would need to create the variable on the char whose values you want to pass from Q1 to Q2. The variable will be of type replacement path and you will need to enter the name of Q1 from which it will get the values. Make sure that you include this char in the query definition of Q1 and Q2. In Q2 you will restrict the characteristic using this variable. DO not use this variable (replacement path) in Q1.
In your query properties check if you have turned on the checkmark for Release for OLE DB for OLAP (3rd tab). If the check mark is there, then remove it.
We are using the scenario in a couple of places, and it works very well.
Hope this helps...

How to Use Team Foundation Server With SharePoint 2013 For Development

Hi All,
As i am new to team foundation server and i want to use team foundation server for our development. Please give me good startup point.

Hi,
If you wanted to integrate Team Foundation Server with SharePoint 2013,
there are two articles for your reference:
http://dumians.wordpress.com/2013/04/01/integrate-team-foundation-server-with-sharepoint-2013/
http://nakedalm.com/integrate-sharepoint-2013-with-team-foundation-server-2013/
By the way, you can also post the question in in Visual Studio Team Foundation Server forums and more experts will assist you.
Team Foundation Server – General http://social.msdn.microsoft.com/Forums/vstudio/en-US/home?forum=tfsgeneral
More information:
SharePoint Products requirements for Team Foundation Server:
http://msdn.microsoft.com/en-us/library/hh667648.aspx
Best Regards,
Linda Li
Linda Li
TechNet Community Support

Formula variable with replacement path on system date

Hi Experts,
I got a requirement to calculate "Days without payment" in report level.
Days without payment = System Date - Payment Date.
(Payment date field is available in CUBE, but system date field is not available in the CUBE)
As we know, the difference b/w 2 dates is not possible directly.It can be possible by creating 2 formula variables with replacement paths on the dates and by writing aformula on these 2 formula variables.
But the thing is I dont have system date readily available, and I tried by using SAP Exit. But we cant create formula variable replacement path on another variable (SAP EXIT).
Do we have any SAP variable for formula with replacement path readily avaliable to get system date (or) any other suggession.
Please suggest me.
Thanks,
Sai Chand.S

Hi Arminder,
Thanks for your valuable answer.
I tried doing the same previously.As u said we can get system date by creating customer exit variable.
But the thing is to find difference b/w 2 dates, we cant do it directly, we need to create 2 formula variables with replacement path.
1) Var1 = Formula variable with replacement path on system date(custoer exit variable).
2) Var2 = Formula variable with replacement path on paymanet date.
Number of days = var1 - var2.
But as in 1st point, we cant create formula variable with replacement path on another variable, as system date is already a variable of type customer exit.
We can create replacement paths only on characteristics.
Please suggest me .
Thanks,
Sai Chand.S

Gung Ho security team vs Debug with replace in development

Similar Messages

Maybe you are looking for