SU25 after after EHP4 to EHP6 upgrade

Hi,
We have recently upgraded our development ECC system to ECC 6.0 EHP 6 from EHP4. We found there are lot of roles affected by
the upgrade in step 2c of SU25.All the proposed changes are due to step 2a which updates the objects/transactions which were never modified by the customer.
While we are still analysing the roles in DEV, the production upgrade date is fast approaching.
Is it advisable to upgrade the Production now and perform the SU25 in DEV later and promote the roles to Production after proper testing in QA?
or is it something we have to do immediately after the upgrade before releasing it to the end users?
Thank you in advance,
Silver

Hi Silver Surfer
Is it advisable to upgrade the Production now and perform the SU25 in DEV later and promote the roles to Production after proper testing in QA?
Do you mean - is it okay for EHP6 to be applied to Production and fix the security later? If so....
Your risk is if new authorisations checks have been introduced to existing transactions that are in design then users may start to receive authorisations errors. If you are willing to risk a flood of annoyed users complaining of lack of access it is technically possible.
Though, if you are moving from EHP4 to EHP6 was security testing along with functionality testing? If so, you may have covered a large portion of the risk.
As far as SU25 goes, it is to assist with fixing up SU24 values based on SAP proposals. Once you need to make changes to SU24 you need to adjust the roles (As per you Step 2c). I've been at places where they made the decision to execute Steps 2a and 2b and then go into PFCG for each impacted role and deactivate the new proposals (i.e. SU24 updated but PFCG remains unchanged from authorisation perspective). This approach enabled them to "technically" complete the security steps and move a transport through to test environment. However, they were relying on security testing of the roles to identify authorisations issues. If issue was identified, they would then fix the role.
Whatever your approach with SU25 is.... security roles need to be tested as part of an upgrade.
Regards
Colleen

Similar Messages

  • Table data getting locked for multiple user for a Z-table updation after EH4 to EHP6 Upgrade

    Hi,
    We have one new upgraded system at EHP6, earlier system was at EH4 where multiple user can Run one Z  T-code and can edit the entries for the Z-table.
    This Z-Tcode is calling SM30 internally for updating the Z-Table.
    Now in the upgraded system, when one user is into the transation code, and other user runs that T-code, systems throws a POP-UP mesg saying that the data is locked and can be displayed only(can not be edited).
    I have debugged the code in both the environment and found that there is one statement Call C_ENQUEUE ID < > field. for which the Sy_Subrc is coming as 2 in the upgraded system which is causing the issue, where as the sy-subrc is 0 in the system at EH4 level.
    Can any body tell me why this Z-tcode is not allowing to be accessed by multiple user at same time for Editing(updating the table) .
    Regards,
    Archana Jha

    Hi,
    When you create the lock object you can define the keys.
    and then you can use those in the ENQUEUE function.
    Regards.
    regards.

  • You Cannot select assembly order for deletion error with BAPI_SALESORDER_CAHNGE after EHP6 upgrade

    Hi All,
    We are using Z transaction to update Wbs element data to sales order line item through BAPI_SALESORDER_CHANGE. After EHP6 upgrade while updating Wbs element data to old sales orders(Created before EHP6 upgrade)  we are getting  You cannot select assembly order < order number> for deletion (V1 748) error in BAPI return table, For multiple Sales order run.
    But if  we run the same order individually it is getting processed successfully. W e are passing the same values in individual and multiple case.
    We debugged the BAPI and found one more error related to Authorization, But BAPI return table is giving different error (V1 748)message. Please help us in finding the issue.

    Hi Sujay..
    Please check.
    http://help.sap.com/saphelp_47x200/helpdata/en/b7/58c4c87e0811d2b66a0000e82d8bd1/frameset.htm

  • Ki235 Error When PGI After Ehp6 Upgrade

    Hello
    What would cause KI235 error when PGI after ehp6 upgrade? We are upgrading to ehp6 and are receiving this error when PGIing delivery. It only does this in the upgraded client and not in non-upgraded client. The automatic account assignments match exactly in both clients and are not missing or incorrect.
    Also check OKB9 setting it is perfectly ok.
    Please advise,
    Thanks,
    Themba

    This is a repetitive issue and have you searched the forum before posting?
    G. Lakshmipathi

  • Control Code from Material not picked in Sales Order after EHP4

    Hi Gurus,
    We have updated Enhancement Package 4 for one of our client.
    It is observed that the system is not picking the values maintained in Control Code of Material master. We have some pricing condition types maintained using the combination of Control Code and other fields, which are not being determined automatically.
    The data is maintained in J1ID for this material and plant combination and it is also filled in material master.
    Please help.
    Thanks in Advance.
    Regards
    Vamsi.

    Hi Vamsi,
    We are also facing the same issue after EHP4 upgrade. Please let me know how you have fixed that issue.
    Thanks
    Rehan Manzoor

  • After BI 7.0 Upgrade, Roles and profiles are not visible

    Hi Gurus,
                                  We have issue with the roles and profiles, all our users doesnt see any roles or profiles in Bex Analyzer, under there user access after BI 7.0 Upgrade. 
                                   When I go and check there profile in SU01 and I can see all roles are assigned but not able to see in the Bex Analyzer reporting tool.
                                   Do we need to do any configuration settings after BI 7.0 upgrade to visible roles. This problem with every user.
                                   Your help will be really appreciated.
    Thanks
    Ganesh Reddy.
    Edited by: Ganesh Reddy on Oct 22, 2009 5:19 PM

    Hi Mohan/Vijay,
                            Sorry for little bit late. I have all authorization roles access, and users dont have that access. Difference between our roles is I have SAP_ALL and SAP_NEW.
                            But when they login with old bex analyzer they can see all roles, but not with new bex analyzer.
                            Please some suggest me still I need to run SU25.
    Thanks
    Dayaker Reddy.
    Edited by: Ganesh Reddy on Oct 26, 2009 10:19 AM

  • DB2 Post installation after EHP4 Installation

    Hi,
    I have completed ehp4 installation in db2 9.1 fp7 database windows 2008 server.What are the post installation activities i should do?
    I have read in the doc where they have given so many post installations.ie post activities before resuming production etc etc..
    But i felt like deleting the old table spaces is important for which they have given the syntax(db2 clp command) also.but if i run that "0 rows selected".pls tell me what is the correct syntax for deleeting old table spaces.
    and also pls let me know what other i need to do after ehp4 installation from your experience.
    Thanks

    Hi Sunny,
    Thanks for your reply.
    Bur the link you have given,is the common for db2 to delete the table spaces.But I need for the post installation for ehp4 in db2.
    for deleting the table spaces,I need to know which are the old table spaces after upgrade for which there is a syntax given in the master guide.below are given in the master guide.
    Deleting Substitution Tablespaces
    After the enhancement package installation, some tablespaces are no longer used and you can delete them.
    To determine the names of these empty substitution tablespaces of the source release enter the following db2 clp command:
    db2 "select tbspace from syscat.tablespaces TS where TS.tbspace like '%E%<rel>%' and not exists ( select 1 from syscat.tables where tbspace = TS.tbspace or index_tbspace = TS.tbspace or long_tbspace = TS.tbspace )"
    To delete all obsolete tablespaces that are returned by the above mentioned db2 clp command, enter the following db2 clp command at the operating system level for each tablespace listed:
    but if i execute no rows selected.
    so pls guide me how to do.

  • I am experiencing wireless connection problem on 4s after ios 8.1 upgrade. The wireless icon appears showing that it's connected but webpages do not load. I have checked my internet connection with other devices and seems to be alright. what to do?

    Hi
    I am experiencing wireless connection problem on 4s after ios 8.1 upgrade. The wireless icon appears showing that it's connected but webpages do not load. I have checked my internet connection with other devices and seems to be alright. what to do?
    I have tried reseting the network settings and forgetting my wireless connection and re-connecting to it. I even backed up my phone on itunes and restored it, factory reseted it. Nothing seems to work.
    Also after my upgrade to ios 8.1 my personal hotspot option under cellular data has disappeared.
    Would you please help me out? I would really appreciate it.

    Hi..
    Restart your router then restart the iPhone to test.
    If that doesn't help, try this support article >   iOS: Troubleshooting Wi-Fi networks and connections

  • Ipad 4 retina display is slow after iOS 8, also upgrade the the iOS 8.0.1 i think and safari is slow, animations are slow, and i can't restore it to iOS 7, there it was great.

    ipad 4 retina display is slow after iOS 8, also upgrade to iOS 8.0.1 i think and safari is slow, animations are slow, and i can't restore it to iOS 7, there it was great. i mean its like my iphone 4 with iOS 7 in its best days. i hope no to get stuck again, i mean please let me go to the iOS 7)).

    Upgraded my ipad4 from ios6 to iOS 8 because the new WSJ app required it. HUGE MISTAKE!!!!!!! I can maybe understand some apps being slower but not Safari or Chrome. Apple must be throttling back the ipad4 processor even more with ios8 to force an upgrade to the next gen iPad whenever it arrives.

  • Sound problems after iOS 4.2 upgrade

    Experiencing very poor sound quality after iOS 4.2 upgrade. Bad eq, left channel dropping out, sounds like heavy reverb. Exists with iPod and pandora apps. Tried adjusting eq in settings. Any one else having problems?

    Yep I just upgraded to new OS 4.2 on iPhone 4 and I get this static buzz sound when talking to people it's really annoying and sound quality is terrible. What happened? I went back to the shop and they said it's the upgrade and that there is an issue with it. They also said there is no point leaving the phone with them as they can't fix it that it's upto apple to release a patch for the problem. Can we get a fix for this soon before I damage my ears?

  • Dictation problems after ios 8.2 upgrade

    I rely heavily upon dictation.   2 problems occur (at minimum) after ios 8.2 upgrade to iphone 6. .
    1. I wasnt going to add this dictation bug (feature ;-)) b/c couldnt reproduce the seemingly safari bug when got home, but as I was dictating my first sentence for defect here, it happens in this text box on any line. :-(.
        1. Problem is as soon as dictation types in word Or words, when I hit done, it erases what was just dictated!  Happens on even just ine word. (So having to manually type all of this n I stink at typing ie, time consuming).
        2. I can paste characters from noteoad into here...so must be dictation relateD...it seems.
    2.  In the calendar textbox, when I dictate a new event (doesnt happen in location textbox) and the last character before it fills up the end of textbox (just before the "x"), it automatically does "done" for me (the beep sounds), it stops dictating, but more annoying is it will no longer allow me to continue dictating in that new event's top textbox.  That means I HAVE to type n I stink at that. To reproduce I simply:
    1. press the microphone.
      2. Type in only numerics 1 thru 17....it will dictate to look like this:  123 456-789-1011 1213 1415 1617
      3. "Beep/dong" noise because it hits the end of characters alowed it seems n decides it is "Done".
      4.  press the microphone
       5. "Beep/dong" noise because it wont let you dictate any more of anything said.
    I Couldnt find the entry where google shows someone with what looks like same issue/bug/defect/feature # 2, so entering this.
    I Have warranty but cant figure out how to get phone support for iphone (only mac ...last year).
    I don't seem to have this problem using i notepad in phone when he gets to having to wrap. :-)
    I Have not trieddictation on my mac...yet.
    CAn someone help on these issues please? Thanks!

    Hey Markwoody,
    Wow! That definitely sounds frustrating, but good job so far isolating and troubleshooting the issue. We have a few more steps that we can try in an attempt to resolve this issue:
    First, it sounds like you have tried restarting your phone. Let’s try a reset instead:
    Restart or reset your iPhone, iPad, or iPod touch - Apple Support
    https://support.apple.com/en-us/ht201559
    How to reset
    - You should reset your device as a last resort and only if you can't restart it.
    - To reset, press and hold both the Sleep/Wake and Home buttons for at least 10 seconds, until you see the Apple logo.
    If the issue persists, we’ll want to restore your device to factory settings and test once more. You can backup your device, but be sure to restore it as new first for isolation purposes, as restoring a backup can sometimes restore the same issues that you were experiencing before.
    Use iTunes to restore your iOS device to factory settings - Apple Support
    http://support.apple.com/en-us/HT201252
    Thanks,
    Matt M.

  • My photos are out of chronological order after the os 5 upgrade.   How can I get them back in order?

    My photos are out of chronological order after the os 5 upgrade.   How can I get them back in order?
    If its not possible, how do I go back to the old  os?

    I had tried that several times with no luck.  Late last night I was finally able to get through  to the Verizon technical support who then called in Apple technical support.  It took 1 1/2 hours for them to figure it out and guide me through a fix.  So here's the deal .......... I use Yahoo mail and had left the "contacts" button in the on position.  Apparently Yahoo likes to go into your contacts and gather information and can leave it in shambles.  My advice is, go to settings, then mail, contacts, calendars.  Select any and all of your email accounts and go in and turn off their access to your information.  Leave it on for Icloud but none of the others.

  • Low memory iPad 2 after 8.1.1 upgrade

    ipad2 after 8.1.1 upgrade receive low memory warning when using a link to another website from a website. Has anyone seen this?

    Hey there saint38,
    I you are still getting this error message when opening links in the Safari app, I would next quit all the running apps on your device:
    iOS: Force an app to close
    Double-click the Home button.
    Swipe left or right until you have located the app you wish to close.
    Swipe the app up to close it.
    When you have done that restart the device and test the issue again:
    iOS: Turning off and on (restarting) and resetting
    If the issue persists, backup your device to iTunes and then restore it as a new device and verify that it works. 
    How to erase your iOS device and then set it up as a new device or restore it from backups
    If it does, then restore your backup to either verify it still works and the software just needed reinstalled, or isolate the issue to the backup file itself. 
    Thank you for using Apple Support Communities.
    Cheers,
    Sterling

  • Only "Headphones" sound, no speaker sound after 4.2.1 upgrading

    After I had finished upgrading 4.2.1 firmware for my iPad, the speaker's sound has gone.
    I can hear the sound from my iPad only when I connected to any headphones or bluetooth devices.
    I tried many methods to get the sound back, starting from:
    1. trying to plug in and out my headphone - nothing changed
    2. switch on and off from the mute button (former is lock button) but it only showed "Headphones" or "Mute" sign.
    3. shut down and turn on my iPad - nothing changed
    4. Hard Reset my iPad and Restore - Still no sound, but I had to re-install everything again
    5. Ask everyone and search every "no sound from iPad" topics but found none like mine.
    However, while I upgraded the firmware, I noticed that I "locked" the screen during the process and I heard someone in the internet told me that it might be the origin of my problem.
    I tried to sync my iPad and find how to re-upgrading the firmware again with no "locked" the button but there is no way to.

    I've been having this problem for several months and just found this thread.  Unfortunately the solution isn't well spelled out, but I was able to resolve the issue. 
    To recap:
    Problem: Many/most non-Apple Apps have no sound from the iPad internal speaker.  Plugging headphones in provides sound from all apps.  Apple Apps (youtube, music, video, safari, etc) continue to function and play sound out of internal speakers normally.
    Resolution: This issue appears to be related to the 'mute' / screen orientation lock button.  If your iPad mute switch was on mute when you switched it to orientation lock, 3rd party apps will remain muted via internal speakers no matter what you do.  Luckily an easy fix: Go Settings -> General and switch from 'lock rotation' to mute.  Slide the switch to the non-muted position. You can now switch back to 'lock rotation' and your apps will play sound from the internal speaker again!!!

  • My laser jet 100 color MFP M175nw is not working after windows 8.1 upgrade,

    my laser jet 100 color MFP M175nw is not working after windows 8.1 upgrade, driver on your website fails to setup at 83 % with an error message

    Welcome to the HP Forums  MillaMagia,
    I see by your post that the USB isn't being recognized.
    I can help you with this issue.
    Are you using the same USB cable? (known good USB cable)
    You want to use the normal USB slot 2.0 cable and not the latest USB 3.0.
    USB 3.0 are supposed to be backwards compatible.
    Try another USB port on the Laptop, some of the USB ports are more powered then others.
    I have provided a document to see if the printer is partially recognized in the device manager, which is causing the printer not to be recognized again. (the uninstall from the CD should have removed the entry and the printer from the registry)
    Leave the printer turned on and the USB cable connected directly to the computer and the printer's power cord directly into a wall outlet.
    How do I get into Windows Device Manager?
    Here is a document for Identifying problems in Windows Device Manager.
    Check to see if there are any hardware driver conflicts, you might see a ! mark or a red x beside a device with a conflict or unknown device, look under universal serial bus controllers, look for USB printing support or mass storage device, delete the entry by right clicking and select uninstall, OK.
    Let me know how it was listed. (screen shots welcome)
    If this is a Laptop then check the power management settings.
    Access the device manager. Windows 8-How do I access the Device Manager.
    Select universal serial bus controllers from the list, for each USB root hub, right click and left click on properties, for power management remove the check mark for "Allow the computer to turn off this device to save power". It allows the computer to limit or turn off power for this device.
    Disconnect the USB, run the full uninstall and reinstall the printer software again.
    If you need further assistance, let me know.
    Have a nice day!
    Thank You.
    Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
    Click the “Kudos Thumbs Up" on the right to say “Thanks” for helping!
    Gemini02
    I work on behalf of HP

Maybe you are looking for

  • Single row in alv report

    Hi experts... I want single row in alv report. I have use loop for fatch data into internal table using loop when i am passing data in alv report then the data comes according loop. i want onlu one data in alv row. how can i do such, plz help me.

  • How can I tell if my phone line is connected to a ...

    Hi, I have been trying to find out if my phone line is connected to the street cabinet or directly to the exchange as the checker says I am unable to get bt infinity. The house 2 doors away seems to be able to get it and having looked at the spreadsh

  • Challenges in deployment descriptors

    We currently have an EJB (called CD) that is contacted "remotely" by a web service (called CA) for some processing. The two (CD and CA) are deployed on different WLS8.1SP1 domains. CD is currently deployed as an EJB jar file (cd.jar) whereas CA is pa

  • App Tabs do not open automatically

    I set GMail and RTM as "App Tabs" but when I open Firefox again they do not open automatically - it simply opens to my normal home page.

  • How to record vhs tape to mac

    how to record vhs tape to mac