Issues with SAP_ALL - Display only

Dear SAP security experts,
I created a Role SAP_ALL_DISPLAY inherited from SAP_ALL profile. I made sure that ACTVT is 03 for all areas. But still it is allowing for some Tcodes like below :
RSA6 -- It is allowing to delete, change, create ...extractors. This is very dangeours
SM37 -- It is allowing to delete BG jobs..etc
.....some more I did not know...dont have time to check.
tcodes like RSA1...SCC*..SPRO... are OK. If finger the check indicators in SU24 for the above tcodes(RSA6,SM37..), what are the bad consequences?. How to fix this in an easy way?
Thank you very much

I guess this needs to be created as an FAQ
- There is no such thing as SAP_ALL_DISPLAY
- Proposal: create a "display only"  role for each functional area in your organisation, i.e. something you could give to every employee working in that area.
- There are LOTS of transactions that couldn't care less about what you put in ACTVT!
- There are display transactions that you do not want to give to people (confidentiality)
- Furthermore, check for ACTVT might be deactivated in SU24
In a nutshell: don't do that. Find out what the exact requirements for that role are, and create it like that. The way you do it now will have many more backdoors than you will ever be able to fix. How are you going to control/audit misuse?
Alternatively: look at SAP GRC Access Controls and evaluate the FireFighter application - this might help.
Sorry, no easy answer here.
Frank.

Similar Messages

  • So, my Macbook Pro with retina display only prints in black and white. My printer, officejet 4620 series [555DE4], is not the problem. I want to know how to be able to print in color as well??

    So, my Macbook Pro with retina display only prints in black and white. My printer, Officejet 4620 series [555DE4], is not the problem. I want to know how to be able to print in color as well??

    In the Print dialog, select the Color Matching tab and then select Vendor Matching.

  • Major Issues with Thunderbolt Display in Yosemite

    I have a MacBook Pro (Retina, 13-inch, Early 2013). I'm having issues with thunderbolt display connectivity despite recent Thunderbolt Firmware update. The sleep wake function is not working and display with shut off sporadically.
    MacBookPro10,2   Processor Name: Intel Core i7   Processor Speed: 3 GHz   Number of Processors: 1   Total Number of Cores: 2   L2 Cache (per Core): 256 KB   L3 Cache: 4 MB   Memory: 8 GB

    Same problem here. I was so excited to see a firmware update this morning for my mac pro, and sure enough as i sat here, the display went black again.

  • Why did carefully over heating my 4s restore the wifi function? This, after 2 months of mysteriously grey out wifi buttons, loads of time trying to resolve issue with apple tech only to be told I must pay $199 to repair the problem. I'm disillusioned now

    Why did carefully over heating my 4s restore the wifi function? This, after 2 months of mysteriously grey out wifi buttons, loads of time trying to resolve issue with apple tech only to be told I must pay $199 to repair the problem. I'm disillusioned now

    Is the Wi-Fi button greyed out?  Try this article: http://support.apple.com/kb/TS1559
    Also, make a backup to iTunes of the device.  Then restore it as a new device.  If you still have wi-fi greyed out, then contact Apple again, and explain that you believe you have a hardware issue.  They may still ask for a $19 deposit, but if it is actually hardware related, then you won't be charged the $19.  Only if it is software related do you get charged that $19.

  • Every time I use safari on my macbook pro with retina display, only half the page will load then it freezes up?

    Every time I use safari on my macbook pro with retina display, only half the page will load then it freezes up? It's brand new, so I don't understand why it would be doing this?

    The warranty entitles you to complimentary phone support for the first 90 days of ownership.

  • 15" late 2011 model with HD display only holds charge for 3hrs...

    15" late 2011 model with HD display only holds charge for 3hrs... i was expecting 6-7hrs... what do you suggest?

    I would suggest you elaborate on what you were doing for those three hours. You can expect 6-7 hours if you want to sit and just watch your desktop. If you want to use your MBP then depending how intensive the processes you are using will determine how fast your battery gets depleted.

  • Click issue with s:Datagrid on mobile for iPads with retina displays (only left half is clickable)

    I'm currently testing a Flex mobile application (that was originally made for iPad 2) on high rest iPad fourth generation and iPad Air devices.
    I'm having this strange issue where the s:DataGrid, no matter where I use it in the application, will display correctly, but only the left half is clickable to select rows. The number of columns in the DataGrid is not important, nor is the width of the DataGrid, the problem is always present. As soon as you try to click in the right half, it doesn't work.
    The application uses an applicationDPI of 160, and scales properly on the higher resolution devices.
    So this feels like a bug to me, as if the DataGrid scales properly, but not it's clickable area?
    I have tried a bunch of stuff to see if I could work around this issue, like calling invalidate functions and setting the DataGrid's width dynamically, but no change so far.
    At this point I'm open for any suggestions or ideas...
    Edit: After further testing it seems the same is true for the height. I noticed when I added more rows in the grid. Only the top half of the DataGrid can be clicked. So it really looks like a dimension issue with the clickable area?
    Thanks

    I ended up not using the DataGrid, and decided to use the experimental MobileGrid instead, which is not afflicted with this issue.
    So this issue no longer concerns me.
    BTW the default theme of MobileGrid is dark, but can be lightened up with CSS and by extending the MobileGrid skins, up to a point where I almost can't tell the difference v.s. the DataGrid.
    It also performs better then the DataGrid. since it's based on List. With 300 elements, it scrolled noticeably faster.

  • Strange issue with external monitor, only working when external speakers plugged in (using Thunderbolt to VGA adaptor)

    Hey – I am having a very strange issue with my external monitor; where it only works if my external speakers are plugged in and connected.
    I am using a late 2011 Macbook pro, running Mavericks 10.9.4, along with an MBox 2 (USB Audio Interface), and two powered speakers (KRK Rokit 5). This setup has had no issues. I have just acquired an external monitor (Benq T2200HD), which I am using with a thunderbolt to VGA adaptor (a cheap Chinese knockoff adaptor).
    To start - I plugged the monitor in with the thunderbolt adaptor, and it powers up and works fine. However, there is a nasty buzz coming from the speakers. I did some research and it looks like a simple ground loop issue. I did a bit of troubleshooting, and this is where things get weird.
    What I found is - If I unplug the MBox, the monitor loses signal from the computer (displaying ‘No Signal Detected!’). Further, if I keep the MBox plugged in, however unplug both the cables from the MBox to the speakers, the monitor loses signal. It doesn’t matter if the speakers are turned off, however they need to be plugged in (or the monitor loses signal). Weirder still, I can unplug the MBox, however the monitor will work if I plug in the speakers through my macs headphone jack.
    Simply put, the monitor only works if there is a direct connection between the computer, the speakers, and the power source.  What is going on here? Is the monitor grounding through the computer port, to the speakers (I don’t know how this works, is this possible?). Could it somehow be the cheap VGA adaptor I am using?
    Some other information:
    - Everything is plugged into the same multi-box for power. I have tried plugging things into separate sources, and the result is the same.
    - If I unplug the thunderbolt adaptor, then the speaker noise disappears straight away.
    - The ground noise doesn’t appear in my headphones, which are plugged into the MBox.
    Any information would be great – am I missing something here, or is this genuinely weird?

    Well, I went back into Best Buy to test on 3 other laptops (2 Asus, and their floor model for this Sony). It seems to be doing the same problem so at least I was able to rule out broken hardware issue on my particular laptop.
    Here's what I did to test:
    Since I couldn't really install Adobe Premiere on their machines, I used the DVIO software (http://www.carr-engineering.com/dvio.htm) and a 5 min clip I captured.  I transferred onto their machines, hooked up my Sony D8, and attempted to play the video.  It would play for 15 seconds and then stop and jitter with a loud noise (like it does on my laptop).  I even tried changing each machine's firewire driver to the legacy one and same results.  I pulled a brand new 4 pin to 4 pin firewire cable off their shelf and still the same problem.
    I think I've nailed it down to Win7x64 bit Home Edition not playing nice with Firewire driver.  Very annoying.  I can't find any concrete evidence of this from other users on any of the forums that have my particular problem, but from my own testing, it's all I can conclude.
    I have 2 other things I can try:
    1.  Opening the laptop and looking at the firewire to maybe find appropriate driver (ugh, I don't want to have to open this thing up).
    2.  Upgrading to Win7x64bit Pro and possibly testing with XP on the new MS Virtual PC (http://www.microsoft.com/windows/virtual-pc/).  I can't do it with my Home edition apparantly.
    Who needs to view video on an external TV anyways....sheeesh...(scarcasm).
    Tim

  • Strange issue with external monitor, only working when external speakers plugged in

    Hey – I am having a very strange issue with my external monitor; where it only works if my external speakers are plugged in and connected.
    I am using a late 2011 Macbook pro, running Mavericks 10.9.4, along with an MBox 2 (USB Audio Interface), and two powered speakers (KRK Rokit 5). This setup has had no issues. I have just acquired an external monitor (Benq T2200HD), which I am using with a thunderbolt to VGA adaptor (a cheap non-apple adaptor).
    To start - I plugged the monitor in with the thunderbolt adaptor, and it powers up and works fine. However, there is a nasty buzz coming from the speakers. I did some research and it looks like a simple ground loop issue. I did a bit of troubleshooting, and this is where things get weird.
    What I found is - If I unplug the MBox, the monitor loses signal from the computer (displaying ‘No Signal Detected!’). Further, if I keep the MBox plugged in, however unplug both the cables from the MBox to the speakers, the monitor loses signal. It doesn’t matter if the speakers are turned off, however they need to be plugged in (or the monitor loses signal). Weirder still, I can unplug the MBox, however the monitor will work if I plug in the speakers through my macs headphone jack.
    Simply put, the monitor only works if there is a direct connection between the computer, the speakers, and the power source.  What is going on here? Is the monitor grounding through the computer port, to the speakers (I don’t know how this works, is this possible?). Could it somehow be the cheap VGA adaptor I am using?
    Some other information:
    - Everything is plugged into the same multi-box for power. I have tried plugging things into separate sources, and the result is the same.
    - If I unplug the thunderbolt adaptor, then the speaker noise disappears straight away.
    - The ground noise doesn’t appear in my headphones, which are plugged into the MBox.
    Any information would be great – am I missing something here, or is this genuinely weird?

    Hello cgoldberg11
    Please go to the below link to test if you are having a speaker hardware failure.
    Testing for Hardware Failures (Windows 7)
    This will rule out hardware failure, let me know how that goes.
    Thanks
    If I have solved your issue, please feel free to provide kudos and make sure you mark this thread as solution provided!
    Although I work for HP, my posts and replies are my own opinion and not those of HP. .....
    Reguards,
    Mo

  • Solution for sleep issues with external display?

    I had an Early 2011 Macbook Pro that worked quite well with an external display.  I now have a Mid 2012 Macbook Pro (bought 5 days ago, and running 10.10.3) that will not consistently work with the same external monitor.
    I had it working yesterday for a few hours only if I left the MBP with the top open (both the MBP screen and external monitor stayed lit).  But, today it is back to freezing each time the monitor is connected to it.
    I have tried:
    1.  Connecting the external monitor to the MBP with the top open.  Results in the MBP screen now going dark and no signal being passed to the external monitor.  If the external monitor is disconnected, the MBP screens stays dark and the computer is unresponsive requiring a hard restart.
    2.  Connecting the external monitor to the MBP with the top closed.  Results in no signal being sent to the external monitor.  Disconnecting the external monitor and reopening the MBP yields, again, and unresponsive computer which requires a hard restart.
    I have tried three different external monitors, all giving the same result.  The MBP is connect to external power, and I am running the latest OS (10.10.3).
    Any suggestions before I return this to the Apple store in a rage?  :-)

    Hello there, Gaflin.
    I'm sorry to hear you're having so much trouble getting your external display to work the way you are expecting with your new MacBook Pro. The following Knowledge Base article provides a great checklist of steps for troubleshooting the issue you seem to be describing:
    Apple computers: Troubleshooting issues with video on internal or external displays - Apple Support
    No video or no signal, image distortion, "snow," or flickering
    Check connections
    When using an external display be sure to check the following:
    If you're using an Apple notebook, confirm the AC power cable or adapter is securely connected to the computer and the cable providing power to the display is also secure. It is always good to have your notebook connected to AC power when an external display is in use.
    Confirm display adapters are fully seated in their respective connections and that they are supported models and for the computer and display. Refer to these articles to assist you with adapter compatibility and further configuration information:
    Monitor and Display Adapter Table
    About Mini DisplayPort to HDMI adapters
    Apple Mini DisplayPort adapters: Frequently asked questions (FAQ)
    Thunderbolt ports and displays: Frequently asked questions (FAQ)
    Remove all display cable extenders, KVM switches, or other like devices and retest to determine if the issue is resolved.
    Try unplugging the video adapter or cable and then plug it back in.
    If more than one video adapter is in use (or "daisy-chained"), troubleshoot by using only one adapter.
    Example: A mini DisplayPort to DVI adapter connected to a DVI to HDMI adapter is an unsupported configuration because there is a series of adapters in use.
    If available, try using a different display and or adapter (or use a different connector by using DVI instead of VGA, for instance).
    Reset the system
    You can reset the Mac's parameter RAM and SMC.Reset the resolution
    Start by resetting the Mac's parameter RAM. If the display does not come up, was previously set to an unsupported resolution, and still results in no video:
    Start up in Safe Mode.
    From the Apple () menu, choose System Preferences.
    Choose Displays from the View menu to open the preferences pane.
    Select any resolution and refresh rate that your display supports.
    Restart your computer.
    Using Closed lid, Extended Desktop, or Mirroring display modes
    When using multiple displays, information can be presented in a number of ways. For more information and what modes are supported by your Apple product refer to:
    Apple Portables: How to use your computer in closed lid (display closed) mode with an external display
    How to use multiple displays with your Mac
    Thanks for reaching out to Apple Support Communities.
    Cheers,
    Pedro.

  • Issue with the display on MBP 15" with anti-glare screen

    Hi Everyone,
    my MBP 15" is only 7 months old, so I need to dig the warranty info out.
    However, I am curious to know whether anyone else has experienced a similar issue with their screen.  Mine has developed a series of small shadows at the bottom of the screen, it almost looks like a theatre stage!!
    Has anyone else had this problem?

    Many people have. It's a fault in the display backlight. Have it repaired while your machine is still under warranty.

  • [SOLVED] Touchpad issues with Eee 900A, only with Arch.

    Hi guys, posting here because I'm having a hard time tracking down this issue.
    I recently aquired an Eee PC 900A, which I have running the 2-09 arch build no prob, but I'm having one massively annoying issue with the touchpad under X.
    Whenever I lift my finger and replace it on the touchpad, at anything but super slow speed (and sometimes even then), the cursor will jump, an in or so back..
    Now I thought this might be a hardware issue, so I've tried booting into different distros (after trying tons of configs  for the synaptics driver in xorg.conf), and this dosen't occur in the Xandros distro that ships with the Eee, or in Eeebuntu..
    I'm pretty certain it's not a  config issue, Eeebuntu uses hal, I've tried using hal, and dozens of xorg.confs.. I've also tried the zen-eee kernel for the 1000/901's, which is older, and still has the same issue.
    So I'm sure this is a software issue, but I'm not sure which.. It even happens if I dont have the xf86-input-synaptics driver installed.. I'm not going to post my xorg.conf here, because it's irrelevant.. I've tried using tons, including the one that ships with xandros..they all change aspects of the synaptics driver, but none affect this issue.
    Anyone else having this issue? Fixes, suggestions?
    Thanks.
    Last edited by dissimilation (2009-03-03 14:11:31)

    hi guys,
    I had a similar bug on my netbook with the Elantech touchpad. I have reported a bug to the maintainer of the Elantech driver and I get a patch that fix it.
    description of my bug:
    with two fingers above the touchpad, tap alterrnatively with each finger on the touchpad.
    - expected behaviour: the cursor does not move.
    - actual behaviour: the cursor jumps sometimes to the left or the right.
    this only happens when configuring the touchpad with synaptics (by defaults, mine is detected as a mouse)
    is your bug the same than mine ?
    are you using both the proto=exps option and synaptics ? (I still have the bug in this configuration)
    if it is the same bug, I have submited the patched kernel to AUR

  • WebI issue with hierarchy display and aggregation

    Trying to wrangle what looks like a defect in WebI's handling of hierarchy display and aggregation. We just completed an update cycle and are running BOBJ 4.1 SP4.
    The hierarchy is a standard FM Commitment Item hierarchy in which both the nodes and leaves are Commitment Items (i.e. it uses InfoObject nodes, not text nodes). An example of one of these nodes looks like this in BW:
    Cmmt_Item A - Node
        Cmmt_Item B - Leaf
        Cmmt_Item C - Leaf
    Let's pretend Commitment Item A has $50 posted to it, B has $20 and C has $30. Analysis for OLAP handles this by adding a virtual leaf line to distinguish postings that are on the parent node like so:
    Cmmt_Item A - Node       $100
        Cmmt_Item A - Leaf    $50
        Cmmt_Item B - Leaf    $20
        Cmmt_Item C - Leaf    $30
    So you see both the total for the node ($100) and a line for each Commitment Items with KFs posted to them. Our users like this. They can easily see the aggregation and the breakdown.
    WebI, on the other hand, will display it like this:
    Cmmt_Item A - Node       $150
        Cmmt_Item B - Leaf    $20
        Cmmt_Item C - Leaf    $30
    It doesn't create a separate line for the value of the parent node, but it does add it's value into the aggregate. Twice. Modifying the table with the 'avoid duplicate row aggregation' checkbox yields output like this:
    Cmmt_Item A - Node       $100
    Cmmt_Item A - Node        $50
        Cmmt_Item B - Leaf    $20
        Cmmt_Item C - Leaf    $30
    We're about halfway there. While the top row now shows the correct aggregation and it creates a new line to show the distinct amount on the parent node, that new line appears on the same level as the parent. It's no longer clear that there's an aggregate and a breakdown. And attempting to expand or contract a node will now crash the report with one of those 'Error 16' messages.
    Has anyone encountered this issue with hierarchies in WebI? This report was built from scratch in 4.1, so I'm not sure if this affects older versions or not. Or if it would affect any hierarchy that uses InfoObject nodes instead of text nodes.

    Without a fix, the simplest workaround I can think of would be to restructure the hierarchy. It can't use postable nodes, so Cmmt_Item A  - Node from my example would need to be converted into a text node and the postable characteristic added as a child on the same level as the B and C leaves.
    This looks like it would affect anyone using hierarchies with postable nodes in a WebI report.
    Another oddity in WebI's behavior here - even though the postable nodes show incorrect sums the sum at the root node is correct. So extending my examples from the original post:
    Root Node                    $100
        Cmmt_Item A - Node       $150
            Cmmt_Item B - Leaf    $20
            Cmmt_Item C - Leaf    $30

  • Long standing issue with Caller Display

    Hello, I hope someone may be able to help.
    We have had no caller display service since just before Christmas, some six or so weeks ago now.
    I must have called 151 nearly 10 times, received several calls back, one visit from Openreach, made three BT complaints, had my reported fault closed several times as the "end user says it is working" (I presume that is me? I certainly havent told anyone at BT it is working!), and must have been on the phone trying to solve this issue for more than 5 or 6 hours in total.  What a waste of my time.
    Essentially, my elderly and disabled parents receive lots of marketing, sales, unwanted type phonecalls etc, and with caller display previously it has helped them decide if they want to pick up the phone or not.  They want to answer calls to friends and family etc, but not to these "nuisance" calls.
    Everything worked fine til just before Christmas, when we found out Caller Display was now going to be a chargeable service.  I dont mind paying for something if it works, and we "opted in".
    However, we still have difficulties with caller display.
    17070 works fine.
    *#234# tells me callers ID will be displayed.
    Several openreach engineers checked exchange and uploaded new software etc.
    The problem still exists some 6 or more weeks on!
    This cannot continue.  I am just going round in circles all the time, speaking with various people on the phone at BT. 
    What can I do next?  Citizens Advice?, Ombudsmen?, letter to BT Chairman? 
    We are not happy bunnies here, but if anyone could help......I would be exceptionally grateful!!
    Thank you.

    Jones01656 wrote:
    Still no solution, nearly two months now! 
    Not good.  Can I get a refund please on the caller ID service as I believe I have been paying £1.75/month since January 4th?
    I still want to problem sorted by the way......
    Any update RobbieMac?
    Thanks.
    Did you agree a new contract  because in your earlier post you say
    Everything worked fine til just before Christmas, when we found out Caller Display was now going to be a chargeable service.  I dont mind paying for something if it works, and we "opted in". "
    if you did then you will not have been paying for caller ID
    toekneem
    http://www.no2nuisancecalls.net
    (EASBF)

  • Website Issues with Retina Displays

    An apple rep stated, that “Yes, some websites are not very clear when viewed with a retina display.” He wouldn’t elaborate further. So, is this a problem? If it is, how major of one is it?
    Also, is there a real difference between the retina display and a high-res non-glare display?  I really like non-glare displays. This apple rep also admitted that although there is less glare in the new retina displays than the previous high-res screens, they are still not as ‘non-glare’ as the older MBP ‘non-glare’ screens.  What’s your opinion about this?  No one really likes any glare if they can get away with it. But is the retina display really a big deal?

    I have not had any issues with web sites. Be aware that if a web site is coded to be 1024 pixels wide and you have your screen resolution set at 2880 wide then the page will be very small and the text unreadable. So you will have to decide what is the best resolution for you. I have mine set at 1920x1200 pixels and all web sites seem to work well.
    There is a noticeable difference between the retina and the glossy screens. About 70% less glare according to Apple. Seems right from my experience.
    You should go to an Apple store and check out the display for yourself.

Maybe you are looking for