S_DEVELOP Missing debug authorization

Hi,
i just found that in our prod env. for bw for all developers we have S_DEVELOP authorization with all activities (*).
i just need to provide them debug access in prd without having access to change the values while debugging.
i see all the activities for S_DEVELOP but not sure what all of them does and why its been given *. can some one explain me all the activities and explain which one should be given ? also, should there be any restriction on DEVCLASS, OBJNAME, OBJTYPE, P_GROUP etc. coz all of them are having * value.
01 - create or generate
02 - change
03 - display
06 - delete
07 - activate, generate
16 - execute
40 - create in DB
41-delete in DB
42 - convert to DB
70 - administer
90 - override
L0 - all function
MA - Deactivate mod. assistant
Thank Y

Probably this comes from the role SAP_BW_DEVELOPER which is a piece of **** (sorry).
All aspects (even display debugging) is critical.
Try to remove all S_DEVELOP authorization and show them some of the blogs on SDN about transaction SE14 and debugging process chains.
What you need to give them in return is an emergency user concept for when them within the BW (not the target system for the extraction) need to be able to use database utilities.
9 times out of 10 there are better solutions, which they will find by necessity if their access is removed.
They will then either improve their coding quality or start building in backdoors (changing ALEREMOTE or BWREMOTE to a service or dialog user and claiming that it cannot work without SAP_ALL and SAP_NEW (also stupid) is one such trick).
Sorry for the rant. It was spontaneous and honest
Cheers,
Julius

Similar Messages

External debugging authorization

Hello All,
Can you please name the role which needs to be assigned to a user so that he will have the external debugging authorizations?.
Thanks and Regards
Shanto Aloor

For debugging the user must have debug authorizations. Please ensure this via setting
appropriate roles or profiles via transaction SU01. Normally the profile "S_ENTW_SHOW"
should be adequate (for detailed information see note[ 668252|http://service.sap.com/sap/support/notes/668252]
Edited by: Mark Foley on Jun 14, 2011 3:37 PM

Debugging authorizations for Web Dynpro

Hi
I want to know the various Roles which are required to activate external debugging required for WebDynpro....
I have been able to debug in Development environment but i think some roles or authorizations are missing in Quality environment.. Please let me know various authorizations/Roles that are required to activate External debugging..
Thanks.

Hi,
There is two option for External Debug.
1. In Settings you need to activate IP Matching
2. In Portal Side particular JCO connection has to enable for debug user then you can use external debug, There is no Extra parameter to pass in user profile.
Regards,
Sathvik
Edited by: Sathvik Surendranatha on Feb 23, 2010 7:09 AM

S_DEVELOP missing

Hi,
Authority object S_DEVELOP is missing in a role. System suggests me add
the object with the parameters;
ACTVT
DEVCLASS
OBJNAME
OBJTYPE
P_GROUP
The problem is, there are suggestions only for ACTVT and OBJTYPE. For
the other parameters, the suggested valued are : <Dummy> . and this
stops me from putting in the specific valus required for the role only.
Thanks in advance or your help,
Regards.

Hi,
What I understood from your question is that you want to have authorization of "Development". Ask your basis group to assign this role to your profile.
Regards,
Usman Malik

Debugging authorization configuration ?

Hi friends,
how can the different system debugging options be configured ?
I can debug my Production system, but I cannot debug this system when I am calling it from another system via RFC.
Thanks

>
Joan Ayala wrote:
> there's a user in the auth-taba?? What is auth-taba ???
sorry, typo - auth-tab: meaning 'Logon & Security'.
check this user's authorisations in the target system ...
>
Joan Ayala wrote:
> user has Authorization object S_DEVELOP, so I guess this is enough
not necessarily - it depends on the values in that object that the user in SM59 has.

Function Tab is missing under Authorization Data in ERM

Hi,
After Uploading roles to the ERM, the functions tab under authorization data is missing.
In the QA the same role has all 4 tabs (including the functions tab)
I've made sure that the "This option allows you to add a function to an authorization" is set to "yes".
Can anyone tell me why is that?
Thank you,
Drorit

Hi,
Ensure that the user ID you are using has sufficient authorization (Eg: Actions: view authorization data etc...).
Regards,
Rama

Roles Tab is missing in authorizations :(

Hi ,
I am not able to assign Role GW_Admin and GW_User as in the authorizations Content, i do not see roles Tab.
Please help how to add above roles to i067753trial user.

Hi,
Go to Services content menu > HCI OData Provisioning > Manage Roles.
Cheers,
--Vlado

A kiss is not a kiss without your sigh - I miss debugging

Probably 15g will have the step-through function. Some of my debugging experience:
Even if you have a catchall, sometimes BPEL console will still tell you something like "Exception occured" and refuse to display the visual flow:
- Divide and conquer: deploy half of the code and see if it works. If you have 1000 steps, 10 times later you can identify which step is the trouble maker - if you have no other choice;
- Drop System.out.println() everywhere in a Java Embedding.
An IDE without debugging capability is not a good tool.
I've see many people (includidng myself) trying to do "programming" using BPEL. I don't think BPEL is a tool for programming. If you have less than 3 service calls, 1 while loop and 1 if-else, BPEL can handle it. Well, if you want to argue that BPEL can handle complex logic, I would have to agree - it just takes 10 times longer than using a normal programming tool. I have this BPEL process which has 2000 lines in .BPEL file and every time when I open visual flow I have to say No hiding to display my 3000+ small squares.
Sorry, I have been babbling here and forgot what I was here for - debugging:
- Make code change;
- deploy to server;
- Run the instance and check stock price meanwhile(wasn't a happy experience either).
- goto step 1;
Are we back to 1972?
- Punctuate holes on card
- Send it to main frame in data center
- run the "code" and see results
- back to your office and make more holes.
I know SOA and BPEL are fashionate, fancy and buzzing, using 100% XML and web service, etc. Well, don't forget the people working under the deck to make the boat sail. We need debugging capability.
BTW, you need to have some programming experience before you can really use BPEL. I don't think a pure business analyst can use it well. I am confused: Is BPEL really for developers?
Edited by: user626166 on Oct 7, 2008 3:28 PM

Love it 15g, wont that be grand.
Not sure if you have seen it but what is generally used for debugging is the test suite. This functionality allows you to simulate your process without deploying on the server. You make dummy stub data to either suceed of fail depending on what you want to test. This may save you alot of heart ache.
cheers
James

Shortdumps because of missing RFC authorization!?

Hello,
I developed a report, that calls a function module, stored in many other SAP Systems.
This report will be called by hundreds of users. But many of these users do not have the appropriate authorizations to call function modules in other systems. If a call is done, SAP throws a shortdump.
But how can I check first, whether the user has the appropriate authorizations to call RFC modules, without triggering a shortdump?
thx, holger

Hi Holger,
1. I think your worry for checking about authorisation
   for users -
   the triggering point for it is the SHORT DUMP
   which the RFC gives. (if im wrong, let me know)
2. If the RFC does not give short dump,
   then ur query can be solved.
3. It a recommended practice by sap to
   call any RFC function
   using EXCEPTIONS.
   2 standard exceptions are ( they might not be available
   in the definiton of FM)
EXCEPTIONS
    communication_failure = 1 MESSAGE msg_text
    system_failure        = 2 MESSAGE msg_text.
You can also get the error message.
4. EG PROGRAM IS BELOW ( Just copy paste)
REPORT abc.
DATA:    msg_text(80) TYPE c.
CALL FUNCTION 'RFC_PING' DESTINATION 'PRD'
EXCEPTIONS
    communication_failure = 1 MESSAGE msg_text
    system_failure        = 2 MESSAGE msg_text.
IF sy-subrc <> 0.
*----- MESSAGE
ENDIF.
5. If u call the rfc in above manner
    short dump will not be there. Morevoer
   u can check the text of error message
   and DIAGNOSE THE ERROR.
Hope the above helps.
Regards,
Amit M.
Message was edited by: Amit Mittal

Predefined Roles Missing in Authorization Management Tool

Hi Guys,
The Predefined roles
SAP_AMT_AUTHORIZATION_ADMINISTRATOR
SAP_AMT_USER_ADMINISTRATOR
SAP_AMT_ROLE_ADMINISTRATOR
are missing when I logged in to AMT.
I checked the SAP notes and found the note 657434.
It asked me to run the report INSERT_ADDITIONAL_AMT_ROLES_40.
I ran the report in the CRM system using transaction se38.
and ran the ConnTrans
But even then the roles are not visible in the AMT.
Did I miss any other Steps.

Hello Zack,
Did you make a manual extract of the subscriptions for the site?
Are some messages coming to the mobile?
If not, try to regenerate the replication object/publication with transaction SMOGGEN and make an extract again.
Regards,
Frédéric

Missing -debug files

Hi,
I'm developing my third Flex application, using Flex Builder
2, and unlike the first two, I have no *-debug.html or *-debug.swf
files... I moved my output directory to the Ruby on Rails server's
public/bin directory, but I had done that for the previous two
projects.
The launch configuration shows that these files should be in
the same directory as the non-debug versions, but they're not!
Thanks to anyone able to help me.
Chris.

peachy

Plant missing in Authorization object

Dear All,
We have created a new plant and transported to Quality Client. Also we have tested the newly created plant in MM01 & other transactions.
When maintaining authoriazations in role,we have taken drop down (F4) in WERKS field of M_MATE_WRK auth obj., but the required, newly created plant is not showing in the same box.
Kindly advise.

Soumen Das MM wrote:
> I have checked, address has been maintained
just double check.
go with SE16 into table T001w and see if you have a value in field ADRNR
is this plant listed in F4 help e.g. in MMBE, MB51 or MM03?
Edited by: Jürgen L. on Aug 13, 2010 10:24 AM

Doesnot ask for access key. error No authorization for the 'S_DEVELOP'

Hi,
After applying patches,in transaction F-43 one of the field Inv Recd Date( BSEG-ZOLLD) is not getting displayed.
after analzing we found that ZOLLD is not there in screen SAPMF05A(0302).
in my development server when i try to change the screen it says "You have no authorization for the authorization object 'S_DEVELOP', which would allow you to change the screen concerned"
my profiles contains sap_all and sap_new rights even then I am getting this error.
Why doesnt it ask for access key ?
Kindly guide me .
Regard

> Please check in Su24, if iy has S_develop object or not,
In SU24? why? and what or who is "iy"?
> since you say you have SAP_ALL access please regenerate SAP_ALL its a composite profile this should work fine.
What does the fact that it is a composite profile matter? Besides that I've already made a remark about regenerating it.
> But you need to check at SU24 against f-43 whether S_develop missing or not,if missing please insert manually
Ehm, do you really think the SU24 settings for a transaction influence the changeability of it's underlying screens/programs etc? It will not matter at all what you do with S_DEVELOP in SU24.

S_DEVELOP & Debug mode

Hello,
How do I' change the auth object ( S_develop) to a debug mode only?
Thanks
Osama

You might Create 2 roles and assign to users on PRD on need basis.
1 is with Debug with Replace
Debug with Replace (Activity 02 and 03 ) Object type - Debug is not generally given in PRD system.
Activity     02, 03
Development class for Transpor *
Object name          *
Object type         DEBUG
Authorization group ABAP/4     *
2 nd with just display access   - Debug Mode Only , the one you asked for.
Debug (Activity 03 ) and and Object type - Debug
Auth Object - s_develop
Activity       03
Development class for Transpor *
Object name          *
Object type         DEBUG
Authorization group ABAP/4     *

S_DEVELOP authorization needed for CRM Web Client in SAP CRM 7.0?

We implemented an own WebUI component in SAP CRM 2007 and use it in others components (with USAGE).
After we transport the component in SAP CRM 7.0 we always got an error CX_BSP_DLC_CONFIG_GENERAL_ERR at loading the component. But if we set the permission to SAP_ALL all thing work fine.
In SAP Note Nr. 1367944 we read:
"It is not possible to run the CRM Web Client without the S_DEVELOP, activity=03
authorization because it is needed by the Web Client Framework.
The S_DEVELOP authorizatin is part of the SAP_CRM_UIU_FRAMEWORK PFCG role, which must
be assigned to every user."
"This dependency has been removed in CRM 7.0."
Do we need to install some other SAP Notes at SAP CRM 7.0?
Many thanks for advices!
Handri Gunawan

Hi Handri,
I asked my collegue here, who created the note.
The note is correct, in CRM 7.0 you do not need S_DEVELOP anymomre.
The error that you have might occur because of another reason.
Could you track the call stack of this exception?
And send me back the call stack?
Regards,
Steve

S_DEVELOP Missing debug authorization

Similar Messages

Maybe you are looking for