R/3: Cause of generated, but still inconsistent profile?

Hi all,
Does anyone know how you can create the following situation:
I have a role with profile status "generated" (both SUPC & PFCG show green light).
Yet in UST12 I find objects for that profile that are not in AGR_1251 or PFCG.
SUIM confirms that the role/profile still contains the objects.
I found several roles like this and wonder what the cause is of this and how to detect & prevent it.
Some screenshots to illustrate:
[01.jpg|http://users.telenet.be/dunkelburg/SAP/01.JPG] - querying tables AGR_1251 & UST12: M_* objects found in Finance role
[02.jpg|http://users.telenet.be/dunkelburg/SAP/02.JPG] - PFCG shows that the profile is generated
[03.jpg|http://users.telenet.be/dunkelburg/SAP/03.JPG] - PFCG says role doesn't contain M_* auth objects
[04.jpg|http://users.telenet.be/dunkelburg/SAP/04.JPG] - in SUIM: looking for roles that have M_BANF_EKO
[05.jpg|http://users.telenet.be/dunkelburg/SAP/05.JPG] - SUIM agrees that the role contains the object
[06.jpg|http://users.telenet.be/dunkelburg/SAP/06.JPG] - SUPC shows that the role is generated
Thanks in advance for your response,
Tom

The bet is on again: I will eat my hat if UST12 is only for reporting purposes... 
USR12 is for old manual profiles and AFAIK only kept backwards compatible because of some ancient old checks which reverse engineered the authority-check statement or wanted to avoid trace confusion. An example of this is the session_manager itself --> when you logon then if you have full access to user and role admin it wil display the button for "Create Role", otherwise not. This is built from such "probing" of the tables.
However an authority-check looks for the object and your user ID in the client you are in as keys of table USRFB2. If it finds the keys, then it uses the object and field AUTH to find the corresponding values in UST12.
If you directly manipulate UST12 (which is another possible explanation for this inconsistency..) then you instantly have the additional access and PFCG knows nothing of it.
The same is true of USRBF2, however that is nearly impossible to observe and tends to corrects itself automatically after a while or whenever anyone next saves a change in SU01.
@ Tom:  For the generated profiles of the PFCG roles, do they have generated unique names? Or did someone think it a good idea to manually name the generated profiles? The profile name also determines the authorization instance name and this might have produced collisions!
Cheers,
Julius

Similar Messages

  • I have huge lag with Safari's Reading List using a rMBP. I have probably 80 articles saved, which is likely the cause of the lag. Is there any way to export that list of articles so as to be able to delete them from Reading List but still have a record?

    I have huge lag with Safari's Reading List using a rMBP. I have probably 80 articles saved, which is likely the cause of the lag. Is there any way to export that list of articles so as to be able to delete them from Reading List but still have a record of the articles I intend to read?

    I'm currently dealing with this issue myself, except that my rMBP has NO articles in the reading list.  It's a brand new rMBP too, purchased just this week, with the 2.6 Ghz Processor & 16GB of RAM.
    Let's see what we can find.  I may just take it back to the Apple Store.

  • I have an ipod touch and it is disabled cause my cousin changed the password and forgot what it is so now it is stuck .. i connected it to the itunes but still the keypad didnt appear and couldnt remember the password.. anyone can help me ?

    i have an ipod touch and it is disabled cause my cousin changed the password and forgot what it is so now it is stuck .. i connected it to the itunes but still the keypad didnt appear and couldnt remember the password.. anyone can help me ?

    Place the iPod in Recovery Mode and restore via iTunes.
    iOS: Wrong passcode results in red disabled screen
    If not successful, try DFU mode.
    How to put iPod touch / iPhone into DFU mode « Karthik's scribblings

  • I have coloured vertical lines about a quarter of the way from the left of the picture when using my apple tv 2. Anyone got any idea what is causing it. Have done a reset but still same. ATV2 is only a month old.

    I have coloured vertical lines about a quarter of the way from the left of the picture when using my apple tv 2. Anyone got any idea what is causing it. Have done a reset but still same. ATV2 is only a month old.

    Just to make sure, try a different set of cables. If the problem persists, have the unit replaced by Apple.

  • I used my boyfriends Apple ID cause mine wasn't letting update anything now my Apple ID is now saying there's a billing problem i put all my stairs in but still won't let me update anything an it's making my phone really slow what so I do?

    I used my boyfriends Apple ID cause mine wasn't letting update anything now my Apple ID is now saying there's a billing problem i put all my stairs in but still won't let me update anything an it's making my phone really slow what so I do?

    Hmm, im pretty sure your not alowed to use a debit card as a method of payment , your options are credit card ( visa, mastercard etc ) but to clarify is it letting you download free stuff ?

  • HT201444 4005 will appear in the recovery system hardware cause it? I have tried to replace numerous devices and cables, but still reported 4005.

    4005 will appear in the recovery system hardware cause it? I have tried to replace numerous devices and cables, but still reported 4005.

    The fix was to completely remove all Apple Software following guides in previous posts.
    Then download and re-install latest iTunes 64-bit, making sure to Run As Administrator.
    This fixed it. Now the next thing seems to be that as I move from one device to another to close and restart iTunes between each one. Treat it gently. It seems to break easily and a lot.

  • My ipod id destroyed! it wont turn on probly cause it is broken, like the screens are off of it but still a little connected. i am wanting to get my information, like my contacts offo fo it how do i do it?

    my ipod id destroyed! it wont turn on probly cause it is broken, like the screens are off of it but still a little connected. i am wanting to get my information, like my contacts off of it, and onto a computer.how do i do it?

    If iTunes can't see the iPod then your only hope is a data recovery company.
    However, if the info is in an iPod backup you can restore another iPod, iPad or iPhone from that backup

  • Iolo System Mechanic app failed and has caused FF not to act right - not loading buttons and some web pages to be a list instead of what the UI should look like.... I have reinstalled but still have the problem and not sure what to do

    Basically certain web pages are not loading proper since app Iolo System Mechanic failed. I have reinstalled FF but still not loading right. Buttons are not showing and some pages are in a list instead of the GUI view.

    I installed and uninstalled Firefox several times - finaly after I selected NOT to have Firefox as the default browser, the installation worked and pages loads correctly now! I made Firefox the default browser after the successful installation!

  • Emails are send. but still some emails are present in OUTBOX

    we have a issue in our infrastructure for few users. the emails are send and shows in send items. but still we can see emails in outbox (not all of them). this is utilizing the mailbox space. any idea how this issue arrived and its fix

    Hi,
    In case it's caused by a corrupted data file, please run Scanpst.exe to fix the data file to check the result.
    Follow the instructions in this kb:
    http://support.microsoft.com/kb/272227/en-us
    If you are using an .ost file, you can simply rename/remove it, then Outlook will generate a new one next time it starts.
    Some corrupted or hidden rules may also cause this problem, you can use MFCMAPI to find and delete these rules to check the result:
    http://mfcmapi.codeplex.com/releases/view/118446
    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
    Regards,
    Melon Chen
    TechNet Community Support

  • Okay so I set up my Time Capsule already and is now backing up 2 of my iMacs. Works great. What I want to know is how to use the TC to directly store files? I want to do this to delete some files but still have them on the TC for future reference..

    Okay so I set up my Time Capsule already and is now backing up 2 of my iMacs. Works great. What I want to know is how to use the TC to directly store files? I want to do this to delete some files on iMac 20inch but still have them on the TC for future reference..eg some movies on iTunes. I want to directly save them on the drive so I can delete them from iTunes and gain some storage. (Ps on iMac 20 inch (it's almost full - 320 GB) when I enter time machine, a tab comes up on finder which reads "Time Machine backups" it's able to be ejected like a disc or a connected device. On the iMac 20 inch, I dragged some files onto there as if using it like a hard drive. Is this the correct method? Then I went to my 27inch iMac and saw the "Time Machine Backups" hoping to see the files I dragged from the 20inch iMac. But the files were not there except a folder that said "Backups.backupdb". Can someone help me?

    It's not a good idea to use a network disk for both Time Machine backups and other things.  By design Time Machine will eventually consume all the space on its output disk, which will then cause problem for your other files.  I'd store those other files on an external disk connected to the Time Capsule.  The problem with that is that Time Machine will only back up files that are local to your Mac.  That means that you'll only have one copy of the files on or attached to your Time Capsule.
    By the way, you've been misled by poor field labeling on this forum into typing a large part of your message into the field intended for the subject.  In the future just type a short summary of your post into that field and type the whole message into the field below that.

  • Delivery notes was created. But still appeared in VKM1.

    Hello Friends,
    I have this case wherein Sales Order that used Letter of Credit as payment Guarantee Procedure. Sales order has been released already and Delivery notes was created. But Delivey notes still appeared in VKM1.
    I would like to ask your opinion on what is the cause why DN was still appearing?
    I need your help.
    Thank you in advance.

    Hi,
    Plz check the credit grp that is assigned to the delivery type. I guess a credit is happening at the delivery level too.
    Regards,
    Saurabh

  • Hello, i have updated my iphone 5 black 16 gb to ios 7 ios 7.0.2 (11a501) and my battery has become worse it gives 9 hours of usage with out doing anything, i have done everything i tried, not using my iphone as well but still no change at all!

    hello, i have updated my iphone 5 black 16 gb to ios 7.0.2 (11a501) and my battery life of my iphone has become worse it gives 9 hours of usage with out doing anything, i have done everything every tip that is available online i had 3gs and 4s so i know how to save battry life,i even tried  not using my iphone as well but still no change at all!. i have upadted to ios 7.0.3 then downgraded it , i thought battery may be an issue ,so i put  brand new battery still no change , so what should i do ? , update to the latest version which is ios 7.0.4 or wait for the ios 7.1 , i was using iphone 4s running on ios 6.1 it gave me 3 days of battery timing , iphone 5 seemed to be very bad for me ,help ! ?
    its facory unlocked btw

    Try to do a reset, if it doesn't work try remove recently added apps this may solve your problem ( like google app because it has happened with me)
    Take a look at apps using your location service in privacy, it can cause battery draining.

  • How do I use transparent=true in my Air app but still displaying swf ?

    How do I use transparent=true in my Air app but still displaying swf's files ?
    The thing is that I created a customized chrome, and looks nice when it is transparent cause seems to be floating, it works as a browser, but the problem is that when I navigate with it into a page wich contains embedded youtube videos, as in example, or any other swf file... it just doesn't show...
    Any help ? thanks in advance,

    Contact iTunes Support: http://www.apple.com/support/itunes/contact/

  • Since I upgrade to Lion OS my optical drive stop working can't read or write at all I did what I could to fix it but still not working , any help please

    Since I upgrade to Lion OS my optical drive stop working can't read or write at all I did what I could to fix it but still not working , any help please

    It sounds like you may have multiple problems, but none of them are likely to be caused by malware.
    First, the internet-related issues may be related to adware or a network compromise. I tend to lean more towards the latter, based on your description of the problem. See:
    http://www.adwaremedic.com/kb/baddns.php
    http://www.adwaremedic.com/kb/hackedrouter.php
    If investigation shows that this is not a network-specific issue, then it's probably adware. See my Adware Removal Guide for help finding and removing it. Note that you mention AdBlock as if it should have prevented this, but it's important to understand that ad blockers do not protect you against adware in any way. Neither would any kind of anti-virus software, which often doesn't detect adware.
    As for the other issues, it sounds like you've got some serious corruption. I would be inclined to say it sounds like a failing drive, except it sounds like you just got it replaced. How did you get all your files back after the new drive was installed?
    (Fair disclosure: I may receive compensation from links to my sites, TheSafeMac.com and AdwareMedic.com, in the form of buttons allowing for donations. Donations are not required to use my site or software.)

  • My ipod 5th G is not recognized by pc but still charging

    i've tried a restore uninstalling Itunes  or reloading the apple device service but still not working, even the device doesnt recogize the pc
    THANKS

    Win7
    See:
    iOS: Device not recognized in iTunes for Windows
    I would start with
    Removing and reinstalling iTunes, QuickTime, and other software components for Windows Vista or Windows 7
    or
    Removing and Reinstalling iTunes, QuickTime, and other software components for Windows XP
    Run this to help if it identifies the cause
    iTunes for Windows: Device Sync Tests
    Have you tried on another computer to help determine if you have a computer or iPod problem?

Maybe you are looking for

  • Use time machine to backup external hard drive (not main one)

    Hi all, I've searched for information on this and getting nowhere. Not sure if it's possible, but I have two USB hard drives now as I've run out of space on my laptop. So therefore I really use one of the hard drives for my main storage and drag file

  • Problem while sending a mail with smtp and ssl

    Hi all, I am new to java mail . I have downloaded one java program to send the mail. I have configured smt and port address.And my System firewall is also in off mode Still i am unable to send the mail The following code is my program import java.uti

  • Save and dependant files problem

    hi when i press f12 to see in the browser i get the "put dependant files" dialogue. why is that and how can i turn it off?

  • Blurry photos once e-mailed from one mac to another

    I am an iphoto novice and need some help to understand why my pictures are blurry. I have two imac computers in different places. I e-mailed myself 20 photos from one computer (where they look and print perfectly) making them all into smaller files f

  • Regarding set up of system landscape

    We want to have only a 2 system landscape for our SAP deployment i.e. Within the development server, we shall have development client and quality client and then just have another production server. Since we have confirmed that this is possible, plea