How to find out users inapproprate access in the system

Hi Experts,
Please any on help me out how to find out the inappropriate critical/sensitive Access is granted to all end users.
Regards,
Reddy v.

Hi Siddhesh,
Thanks for your reply.
I already used  the SUIM T-code, but unable to find out users, those who have critical / Sensitive authorization, could you please help me to find out the same by using SUIM,
We will  able to get the critical / Sensitive authorization users details by executing RSUSR005.
It display all Usres those who have critical / Sensitive authorization.
But I want to know is thier any other way to find out the same.
If any one help me to find out it will usefull for me for the security issue.
Thanks
Prakash

Similar Messages

  • How to find out user exit

    Hi All,
    How to find out User Exit in particular program.
    I mean if you have one profile, how to find is there any user exits in that program.
    Appreciate if any body tel answer.
    Thanks & Regards,
    Subbu

    You could try searching the main program for "userexit_"
    This would give you a list of all the available user exits within the application.
    For Customer exits, you could search SMOD with a short description ex: order in the F4 help. Another way is to search for CUSTOMER-FUNCTION in the main program. You can then navigate to the enhancement in the customer function and use the Z Program in the enhancement.
    http://www.easymarketplace.de/userexit.php - has a complete list.
    More specifically, in case you're looking for SD exits - http://help.sap.com/saphelp_46c/helpdata/en/1c/f62c7dd435d1118b3f0060b03ca329/content.htm.

  • How to find out user exits of t-code va03

    hi all
       how to find out user exits of any t-code .
    regards
    deepak

    Hi Deepak,
    <b>Try this code.</b>
    *& Report  Z_USEREXIT                                                  *
    REPORT  Z_USEREXIT
    NO STANDARD PAGE HEADING.
    *&  Enter the transaction code that you want to search through in order
    *&  to find which Standard SAP User Exits exists.
    *& Tables
    TABLES : tstc,     "SAP Transaction Codes
             tadir,    "Directory of Repository Objects
             modsapt,  "SAP Enhancements - Short Texts
             modact,   "Modifications
             trdir,    "System table TRDIR
             tfdir,    "Function Module
             enlfdir,  "Additional Attributes for Function Modules
             tstct.    "Transaction Code Texts
    *& Variables
    DATA : jtab LIKE tadir OCCURS 0 WITH HEADER LINE.
    DATA : field1(30).
    DATA : v_devclass LIKE tadir-devclass.
    *& Selection Screen Parameters
    SELECTION-SCREEN BEGIN OF BLOCK a01 WITH FRAME TITLE text-001.
    SELECTION-SCREEN SKIP.
    PARAMETERS : p_tcode LIKE tstc-tcode OBLIGATORY.
    SELECTION-SCREEN SKIP.
    SELECTION-SCREEN END OF BLOCK a01.
    *& Start of main program
    START-OF-SELECTION.
    Validate Transaction Code
      SELECT SINGLE * FROM tstc
        WHERE tcode EQ p_tcode.
    Find Repository Objects for transaction code
      IF sy-subrc EQ 0.
        SELECT SINGLE * FROM tadir
           WHERE pgmid    = 'R3TR'
             AND object   = 'PROG'
             AND obj_name = tstc-pgmna.
        MOVE : tadir-devclass TO v_devclass.
        IF sy-subrc NE 0.
          SELECT SINGLE * FROM trdir
             WHERE name = tstc-pgmna.
          IF trdir-subc EQ 'F'.
            SELECT SINGLE * FROM tfdir
              WHERE pname = tstc-pgmna.
            SELECT SINGLE * FROM enlfdir
              WHERE funcname = tfdir-funcname.
            SELECT SINGLE * FROM tadir
              WHERE pgmid    = 'R3TR'
                AND object   = 'FUGR'
                AND obj_name = enlfdir-area.
            MOVE : tadir-devclass TO v_devclass.
          ENDIF.
        ENDIF.
    Find SAP Modifactions
        SELECT * FROM tadir
          INTO TABLE jtab
          WHERE pgmid    = 'R3TR'
            AND object   = 'SMOD'
            AND devclass = v_devclass.
        SELECT SINGLE * FROM tstct
          WHERE sprsl EQ sy-langu
            AND tcode EQ p_tcode.
        FORMAT COLOR COL_POSITIVE INTENSIFIED OFF.
        WRITE:/(19) 'Transaction Code - ',
        20(20) p_tcode,
        45(50) tstct-ttext.
        SKIP.
        IF NOT jtab[] IS INITIAL.
          WRITE:/(95) sy-uline.
          FORMAT COLOR COL_HEADING INTENSIFIED ON.
          WRITE:/1 sy-vline,
          2 'Exit Name',
          21 sy-vline ,
          22 'Description',
          95 sy-vline.
          WRITE:/(95) sy-uline.
          LOOP AT jtab.
            SELECT SINGLE * FROM modsapt
            WHERE sprsl = sy-langu AND
            name = jtab-obj_name.
            FORMAT COLOR COL_NORMAL INTENSIFIED OFF.
            WRITE:/1 sy-vline,
            2 jtab-obj_name HOTSPOT ON,
            21 sy-vline ,
            22 modsapt-modtext,
            95 sy-vline.
          ENDLOOP.
          WRITE:/(95) sy-uline.
          DESCRIBE TABLE jtab.
          SKIP.
          FORMAT COLOR COL_TOTAL INTENSIFIED ON.
          WRITE:/ 'No of Exits:' , sy-tfill.
        ELSE.
          FORMAT COLOR COL_NEGATIVE INTENSIFIED ON.
          WRITE:/(95) 'No User Exit exists'.
        ENDIF.
      ELSE.
        FORMAT COLOR COL_NEGATIVE INTENSIFIED ON.
        WRITE:/(95) 'Transaction Code Does Not Exist'.
      ENDIF.
    Take the user to SMOD for the Exit that was selected.
    AT LINE-SELECTION.
      GET CURSOR FIELD field1.
      CHECK field1(4) EQ 'JTAB'.
      SET PARAMETER ID 'MON' FIELD sy-lisel+1(10).
      CALL TRANSACTION 'SMOD' AND SKIP FIRST SCREEN.
    <b>plz reward points if helpful or if it solves ur query.</b>
    Thanks
    Chinmay

  • How to find out web-inf path from the physical drive?

    How to find out web-inf path from the physical drive?
    I have some user profiles in web-inf directory.SO I want to know the path from root directory like
    d:/program files/allaire/jrun/appname/web-inf/profiles/username like that.
    Presently I am able to get the path upto the application directory and from that I am concatinationg web-inf/profiles/username .
    But it is giving problems when it is deployed under unix or linux.Because web-inf there it treats as WEB_INF
    SO I want to get the path of web-inf directory with out hard coding.
    Thanku

    String path = application.getRealPath("/WEB-INF/profiles/username");
    Note sure why you need this, but you don't need the real path to read the file - you can get an InputStream using the relative path. See ServletContext getResource() and getResourceAsStream().

  • How to find out if your Mac has the new Virus ?

    How to find out if your Mac has the new Virus, and how to fix it ???

    Helpful Links Regarding Flashback Trojan
    A link to a great User Tip about the trojan: Flashback Trojan User Tip
    A related link in the tip to a checker: Malware Checker Dowload Link
    A Google search can reveal a variety of alternatives on how the remove the trojan should your computer get infected. This can get you started.
    For now I recommend the User Tip from etressoft to detect and remove:
    Checking for and removing the "Flashback" trojan
    Kaspersky Flashback Trojan Site:Flashback Trojan Detection and Removal
    Also see Apple's article About Flashback malware.

  • How to find out which objects are at the end of the datafiles

    My Scenario is having a tablespace of 65G but the data is 5G and that is at the end of datafile for that we are not able to resize the datafile our though is to find out what are the objects at that end of datafiles and will either alter move <owner.tablename> move or alter index <owner.index> rebuld online.
    For that how to find out which objects are at the end of the datafiles.

    >
    My Scenario is having a tablespace of 65G but the data is 5G and that is at the end of datafile for that we are not able to resize the datafile our though is to find out what are the objects at that end of datafiles and will either alter move <owner.tablename> move or alter index <owner.index> rebuld online.
    For that how to find out which objects are at the end of the datafiles.
    >
    You may want to copy this and add it to your toolkit
    See 'What's at the End of the File?' in this Tom Kyte article from the Sept 2004 Oracle Magazine
    http://www.oracle.com/technetwork/issue-archive/o54asktom-086284.html
    And this AskTom blog shows you how to generate a script containing ALTER statements toresize your datafiles to the smallest possible. You can 'pick and choose' from the ALTER statements to do what you want.
    Then of course, you can use techniques from this article by Oracle ACE, and noted author, Jonathan Lewis
    http://jonathanlewis.wordpress.com/2010/02/06/shrink-tablespace/

  • How to find out which data control do the page layout components come from?

    hi,
    work in Jdev 11.1.2.3
    After have drag and drop data control into pages designer, how to find out which data control do the page layout component (such as a field in form layout) come from?
    --i cannot find data control related information in the property pallete for the page layout component.
    Regards.

    This information can be found in the page definition file.
    Select the field in the page and then click the binding tab.

  • How to find out users who have answered security questions

    Is there any report where we can find out users who have answered security questions.
    Please reply back to this.

    This might help you:
    Define a task template, reference the UserQuestionReport task definition:
      <TaskDefinitionRef>
        <ObjectRef type='TaskDefinition' id='#ID#TaskDefinition:UserQuestionReport' name='User Question Report' displayName='UI_REPTS_XML_USER_QUESTION_TITLE'/>
      </TaskDefinitionRef>Define desired variables
          <Attribute name='attrListField'>
            <List>
              <String>accountId</String>
              <String>policy</String>
              <String>loginInterface</String>
              <String>questions</String>
            </List>
          </Attribute>
          <Attribute name='attrMapField'>
            <Map>
              <MapEntry key='accountId' value='UI_REPTS_XML_REPORT_ATTR_ACCOUNTID'/>
              <MapEntry key='loginInterface' value='UI_ATTR_LOGIN_INTERFACE'/>
              <MapEntry key='policy' value='UI_SERVICEMODIFY_JSP_ACCOUNTPOLICY'/>
              <MapEntry key='questions' value='UI_ATTR_MIN_QUESTION_UNANSWERED'/>
            </Map>
          </Attribute>and the rest of the task template for a report definition.
    Hth
    Edited by: nickoarg on Feb 5, 2009 1:57 PM

  • How to find out which class/method is calling System.gc

    Hi
    I am seeing frequent FULL GC and not able to locate which particular class/method is calling the System.gc(). I have disabled it using -XX:DisableExplicitGC and performance issues have been resolved. Also, I noticed that it does not happen periodically, so it is not RMI GC. How to find out who exactly is doing this? Does any of of the profilers like Optimizeit/Jprobe help find out this.
    Thanks

    Hi
    I am seeing frequent FULL GC This is because you are creating and destroying objects VERY frequently. Try to look at your design and see where you can reuse objects (i.e. object pooling) if possible, that is if this is adversely affecting performance.
    and not able to locate
    which particular class/method is calling the
    System.gc(). Classes don't call GC. The VM handles that automagically.
    I have disabled it using
    -XX:DisableExplicitGC and performance issues have
    been resolved. Also, I noticed that it does not
    happen periodically, so it is not RMI GC. How to find
    out who exactly is doing this? Does any of of the
    profilers like Optimizeit/Jprobe help find out this.OptimizeIt will tell you everything you need to know. However, NetBeans offers a free profiler now!

  • How to find out which cube/ods has the code

    hi,
    I want to find out which cube/ods has the start routine/update rules written in it.  Is there a table or Tcode to find out the code instead of opening each cube/ods to find out whether there is code in it or not.
    Thanks,
    Sam

    hi Sam,
    take a look
    /message/3483792#3483792 [original link is broken]
    try RSTRAN, field STARTROUTINE
    related tables
    RSAROUT
    RSAABAP
    RSAABAPINV
    RSAROUTT
    Technical name of start routine
    Re: How to get info about a GP* program?
    Re: Search for start, update rule, etc. that uses infoobject
    if couldnt find out, you can use ST05 'sql trace', open 2 session, one for create start routine, and one for ST05, activate with option 'sql trace', then create start routine and 'deactivate trace' and 'display trace', and check out the tables list
    hope this helps.

  • How to find out user privilege using JPDK

    Hi All,
    How can I find out what type of user-privilege that a user has inside the renderBody method of the subclass of the BaseManagedRenderer class? e.g: whether the user has the Administer privilege.
    I looked through the ProviderUser object which can be obtained from the pr.getUser() (PortletRenderRequest.getUser()) and it does not seem to provide the method to get the user's privilege.
    Any insight is greatly appreciated!
    Thanks,
    Vince

    Vince,
    How did you figure out calling the is_user_in_group or other
    similar function calls in the WWSEC_API?
    I tried making a regular SQL Statement by doing the following.
    CallableStatement callablestatement = conn.prepareCall
    ("begin ? := wwsec_api.is_user_in_group(?,?); end;");
    callablestatement.registerOutParameter(1, 12);
    callablestatement.setInt(2, 17);
    callablestatement.setInt(3, 0);
    callablestatement.execute();
    boolean s2 = callablestatement.getBoolean(1);
    callablestatement.close();
    but it fails with the following exception in the JSP...
    java.sql.SQLException: ORA-06550: line 1, column 13: PLS-00382:
    expression is of wrong type ORA-06550: line 1, column 7: PL/SQL:
    Statement ignored
    Can you shed some light on the problem?
    Thanks,
    Niket Parikh

  • How to find out user info for a forecasted value

    Hi Experts,
    Suppose, a user plans on a planning application and consequently creates some forecast values. How do i find out which user did the planning? Is there any way to know this? Please let me know of this if anybody knows.
    Regards
    Swaroop

    Hi, I'm using BPS so can't say forIP. But if you really want to see who posted which data, the planning application has to be set up that way in order to capture the user, time, date details, as indicated by the previous post. This will ptentially of course create very many more records in some cases, where data is amended.
    But your post also requested info about who ran which planning functionality, and when. You can get this sort of information in BPS from the transactions BPS_STAT0 and BPS_STAT1. You may want to narrow the amount of analysis using the username/ date /time filters.
    Stephen

  • How to find which user has access to Discoverer Reports?

    I need to find users having access to Discovered reports using a script. How can I do that?

    Hi,
    You need to give more details...
    Are you using oracle applications? are the users database users?
    If you use oracle application you can use the following:
    SELECT DISTINCT Disco_Docs.Doc_Name "Discoverer Workbook"
    ,Trunc(Disco_Docs.Doc_Created_Date) "Workbook Create Date"
    ,CASE
    WHEN Instr(Disco_Docs.Doc_Created_By
    ,'#') = 0 THEN
    Disco_Docs.Doc_Created_By
    WHEN Instr(Disco_Docs.Doc_Created_By
    ,'#') > 0
    AND Instr(Disco_Docs.Doc_Created_By
    ,2) = 0 THEN
    (SELECT Fu.User_Name
    FROM Fnd_User Fu
    WHERE Fu.User_Id = Substr(Disco_Docs.Doc_Created_By
    ,2
    ,5))
    ELSE
    NULL
    END "Workbook Owner/Creator"
    ,Disco_Users.Eu_Username
    ,CASE
    WHEN Instr(Disco_Users.Eu_Username
    ,'#') = 0 THEN
    Disco_Users.Eu_Username
    WHEN Instr(Disco_Users.Eu_Username
    ,'#') > 0
    AND Instr(Disco_Users.Eu_Username
    ,2) = 0 THEN
    (SELECT Fu.User_Name
    FROM Fnd_User Fu
    WHERE Fu.User_Id = Substr(Disco_Users.Eu_Username
    ,2
    ,5))
    ELSE
    (SELECT Resp.Responsibility_Name
    FROM Fnd_Responsibility_Tl Resp
    WHERE Resp.Responsibility_Id =
    Substr(Disco_Users.Eu_Username
    ,2
    ,5))
    END AS "Shared Name / Responsibility"
    FROM Eul_Us.Eul5_Documents Disco_Docs
    ,Eul_Us.Eul5_Access_Privs Disco_Shares
    ,Eul_Us.Eul5_Eul_Users Disco_Users
    WHERE Disco_Docs.Doc_Id = Disco_Shares.Gd_Doc_Id(+) AND
    Disco_Users.Eu_Username(+) NOT IN ('EUL5', 'PUBLIC') AND
    Disco_Users.Eu_Id(+) = Disco_Shares.Ap_Eu_Id
    Tamir

  • How to find out user

    Hi All,
    the info cube is changed by one user. How can we find out that user.
    Thanks to all,
    sri

    Srinivas
    Double click on infocube it takes you to change mode and go to environment if I remember well click on history some thing like this and you will see change history.
    Hope this helps
    Thanks
    Sat

  • How to find out user exit for LI20

    any one please tell me how can find user-exit for LI20
    Regards,
    Venkat

    Well if you want to search user exits associated with the t-code LI20...
    then go to se93, enter the t-code LI20->click on display-> go the program-> go to find next in the top menu (under Edit) and write "user_exit" and select "In the main program" and and click on continue... in case if there is any user exit; it will show you.
    Regards,
    Raman

Maybe you are looking for