Upgrade SAP Access Control v5.2 to Access control v5.3 in DS v3

Hi All,
I have a Discovery Server v3 with which SAP Access Control v5.2 is available. Is there a possibility to upgrade the version of Access Control to v5.3. Does SAP supports this.Please provide your inputs ASAP.
Regards,
Chaitra

Solved from another SDN forum thread:
Re: Testing SP07 with SPM
Posted: May 18, 2009 8:10 PM    in response to: David Damaskinos           Reply
Actually SP7fix1 fixed a security gap in FF. It would have been better if SAP did not require this auth check. In the redesigned process when FF session is started the FF ID is unlocked and password is reset. Now no one needs to maintain the FF passwords anymore (even though this was not the security gap), as the security button in FF overview screen is not in use anymore.
Gary Morris
Posts: 31
Registered: 5/9/07
Forum Points: 0
   Re: Testing SP07 with SPM
Posted: May 19, 2009 3:01 AM    in response to: S. Pados           Reply
New process? Where did you get documentation on the new process for SP7, fix 1?
Frank Koehntopp
Posts: 255
Registered: 1/4/05
Forum Points: 402
   Re: Testing SP07 with SPM
Posted: May 20, 2009 11:46 AM    in response to: Gary Morris           Reply
Actually this fixed a few security issues - I agree it should be documented better.
You now no longer need to know the password of the FF ID User, so noone can misuse it.
Also, you're no longer limited to service users and can use dialog users for FF IDs. This has been a requirement by some customers, as the "Services for Object" Menu Item will only be possible for Dialog users.
You should assign all FF IDs to a Firefighter user group and limit S_USER_GRP to that user group in the SPM roles.
Frank.

Similar Messages

Difference between SAP Access Control and IDM

Hi Expert,
I have one question What is the difference between SAP Access Control and SAP Identity Management ?

Ali,
That's a good question, but a tough one.
While both applications can do most of what the other can do, it's a matter of specialization in my opinion.
Access Control is all about managing and controlling access to SAP system roles and has the ability to report on role conflicts for compliance and reporting purposes. (I'm sure I'm leaving a lot out, but maybe a GRC / AC expert can fill in more details)
SAP IDM is about managing the user life cycle with regards to landscape and enterprise systems. It will handle the creation, update and ultimately the removal (or de-provisioning) of users in SAP ABAP, SAP JAVA, LDAP, JDBC, and API based applications. It will also do Role Management through a web based UI (User management is web based as well). and as of the latest Service pack for SAP IDM 7.2, it will do attestation (limited certification) as well. It is a definite upgrade to CUA as it will work with a greater variety of systems, include workflows and approvals.
GRC will do some provisioning, but it's somewhat limited, as is IDM's compliance abilities.
The applications are designed to work together, however it does not have a great track record and the integration is typically heavily modified to work as desired.
If you have specific questions, feel free to post / DM. Obviously I am more knowledgeable about IDM, but I'll be happy to help you in any way possible.
Regards,
Matt

Creation of RFC destination for SAP-Access Connectivity

Hi,
       I want to create a RFC destination for SAP-Access connectivity.
Can I get some help regarding it's connection type,activation type and gateway options required for the same.
Regrads,
Anthony D'souza

Hi
Please see the following:
1. Create an entry in Trxn DBCA for SQL Server in SAP, you are creating a database connection for the SQL server in SAP.
2. You use this connection, and write Native SQL stmnts...between EXECSQL...ENDEXEC to fetch the data..and then normal ABAP statements to put that data into your ztable.
TABLE DBCON Entry can be like this...depends on your External database..
CON_NAME          Raj                      Logical name for connection
DBMS                   MSS                   Microsoft SQL Server
USER_NAME        <User name>       For SQL Server
PASSWORD         <password>         " "
CON_ENV             MSSQL_SERVER=<server> MSSQL_DBNAME=<database name>
DB_RECO                 Availability type for an open database connect
FUNCTION z_houston_connect.
""Local interface:
EXEC SQL.
CONNECT TO 'RAJ' AS 'V'
ENDEXEC.
EXEC SQL.
SET CONNECTION 'V'
ENDEXEC.
*- Get the data from MS-SQL Server
EXEC SQL.
open C1 for
select
l.loc_id,
l.loc_name,
a.acc_id,
a.acc_name,
d.person
from ho_loc_mast as l
inner join snd_acc_mast as a on l.loc_id = a.loc_id
inner join snd_acc_addr as d on a.loc_id = d.loc_id and
a.acc_id = d.acc_id
where l.loc_id = '001'
ENDEXEC.
DO.
EXEC SQL.
FETCH NEXT C1 into :wa-c_locid, :wa-c_locname, :wa-c_acc_id, :wa-c_acc_name, :wa-c_person
ENDEXEC.
IF sy-subrc = 0.
PERFORM loop_output.
ELSE.
EXIT.
ENDIF.
ENDDO.
EXEC SQL.
CLOSE C1
ENDEXEC.
ENDFUNCTION.
Regards,
Raj

SAP Access Cross Pollination

We are implementing SAP ECC in our organization, and I had a question about SAP access cross pollination. We may have instances in our organization where people may need different access in SAP, based on the organization they are working with.
For example: an individual needing to park (but not post) documents for company code 0001 and post (but not park) documents for company code 0002
From what I remember, one has to be careful because crossing authorization objects/values for certain t-codes will lead to opening up unintended access and SOD conflicts for a user.
Is there a way to design security roles on SAP ECC to so that we can assign a user the ability to run F-02 for Company 0001 and FBV0 for company 0002 without having them inherit access to be able to park and post documents for companies 0001 and 0002?
Thanks in advance!!

The use of parking documents has been abused a bit in the name of SoD im my opinion.
As far as I know, it was intended for when a soccer match is about to start or the accountant wants to go to the toilet and the SAPGui timeout is set too low or the network itself is unstable.
If you want to achieve this, then you might want to look into WAPIs (workflow application program interfaces). They are BAPIs (business application program interfaces) on steriods.
I would speculate that user training and some business process monitoring would be an easier route and has other advantages as well.
On a serious note without development effort: You can look to see whether config and the "B-segments" of the authority-check give your a usable option to "isolate" an object to a specific transaction code context, or if you are brave then turn one of them off (No-Check in SU24) so that you can hobble the activity '77' check for that use-case. But it should be treated with care.
Have fun paralyzing your business efficiency with SOX requirements for end-users....
Cheers,
Julius

Execute SAP transaction online ( w/o SAP access ) using web dynpro

Hello,
We have made a quiz on sap using a module pool program which we want to run online on systems wihtout sap access.
How to go about it.we have to acces database for users QUIZ ID to run that particular quiz.In the end we are showing graphs for user score and certificate on smartforms.how we will run this transaction on web browser with dynamic interaction with the databse on the systems in same company.
Thanks & Regards
Monika

Hi,
You can directly call DB via native SQL call. What is a business reason for accessing DB directly without SAP Application server ? Are you looking for a way cheating user license ?
Regards,
Masa

Error in PHASE PREP_EXTRACT/PREIMP: Upgrade SAP R/3 4.7 to SAP ECC 6.0 EHP4

Hello,
I'm currently in upgrading a SAP R/3 4.7 system to a SAP ECC 6.0 EHP4.
Therefore I followed the Upgrade Guide from marketplace - installation- and upgrade guides - SAP ERP - SAP ERP 6.0 - SAP Enhancement Package 4 for SAP ERP 6.0 - Upgrade Guide SAP ERP including EHP4 SR1 - Unix on MaxDB.
I downloaded media from marketplace/swdc - Installations and Upgrades - SAP Application Components - SAP ERP - SAP ERP ENHANCE PACKAGE - EHP4 FOR SAP ERP 6.0 / NW7.01 - Upgrade.
I'm starting upgrade with upgrade master DVD 51036889_1 and      51036889_2.
Now upgrade breaks down in phase PREP_EXTRACT/PREIMP with error:
Severe error(s) occured in phase PREP_EXTRACT/PREIMP!
Last error code set: Single errors (code <= 8) found in logfile 'PREIMP.ELG'
PREIMP.ELG says:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
R3trans preimport and RETURN CODE in R710VPE.REX
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2EETW169 no connect possible: "maybe someone set invalid values for DIR_LIBRARY ('/usr/sap/REX/SYS/exe/run') or dbms_type ('ADA')"
Kernel is stored in /usr/sap/REX/SYS/exe/run and database is ADA (maxdb).
File R710VPE.REX says:
4 EPU201XBEGIN OF SECTION BEING ANALYZED
4 ETW000 R3trans version 6.13 (release 640 - 17.02.10 - 13:07:00).
4 ETW000 ===============================================
4 ETW000
4 ETW000 date&time   : 07.03.2011 - 15:28:36
4 ETW000 control file: /usr/sap/REX/upg/abap/tmp/PREIMPTRANS.CTL
4 ETW000 > import
4 ETW000 > file='/usr/sap/REX/upg/abap/bin/R710VPE.SAP'
4 ETW000 > safeandslow=yes
4 ETW000 > buffersync =yes
4 ETW000 > commit     =1048576
4 ETW000 > importtruncated =yes
4 ETW000 R3trans was called as follows: R3trans -w /usr/sap/REX/upg/abap/tmp/R710VPE.REX -u 1 /usr/sap/REX/upg/abap/tmp/PREIMPTRANS.CTL
4 ETW000 active unconditional modes: 1
2EETW169 no connect possible: "maybe someone set invalid values for DIR_LIBRARY ('/usr/sap/REX/SYS/exe/run') or dbms_type ('ADA')"
4 EPU202XEND OF SECTION BEING ANALYZED
Can anybody help me out here?
Regards,
Julia

Hello,
I run 'R3trans -x' command, but there was no problem - connection to database was working.
Problem was following:
Before starting the sdt service on host, I set environment variables JAVA_HOME and LD_LIBRARY_PATH for sidadm. That's not neccessary and that was the problem. Without setting these variables it is working now.
Thanks,
Julia

Error when including SAP Scripting Control

Hello,
I was using SAP Scripting Control in VB with SAPGUI 620 without any problems. I upgraded my SAPGUI to 640 (patch level 8). Now, I am not able to include the SAP Scripting Control (sapfewse.ocx) in Visual Basic. Whenever I try to include it, I get an error "Circular dependencies between modules". Am I doing something wrong?
I also installed the patch level 20 but I still get the same error.
Any help would be highly appreciated.
Thanks.

Hi Vishal,
please upgrade to the latest 640 patch. The problem was fixed, I think patch 11 should work fine.
Best regards,
Christian

Web Service is not working after Upgrade SAP EHP6

Hi ,
Recently we upgraded SAP ECC 6.0 to EHP 6.
We have a custom web service which is consumed in .NET Application to get the Sold To from Sales Order.
the service is working perfectly before upgrade and it is not working after upgrade to EHP6.
When I tested the Service in WS Navigator in SAP, it is working fine.
We raised a message to SAP and SAP analyze the Traces and confirm that the HTTP Request Header coming from .NET application is not having User ID and Password , so it is throwing exception from SAP as unauthorized.
But in service it is configuration as basic authentication and log on using user id and password and .NET application is calling service by passing user ID & Password.
Customer is not happy as it is working before Upgrade and SAP confirmed every thing fine in SAP, but the service is not working.
we did the below steps.
Regenerated the configuration
Re imported the Certificates
Activated the service in SICF.
Please let me know if anybody have same problem or if any steps we are missing.
thanks.
Uma

after changing the .NET Application , Service is working fine.

Upgrading SAP ESS and MSS after HR upgrade in ECC 6.0

Hello
I am new to SAP netweaver.
Our landscape has an ECC 6.0 system integrated with EP 7.0.
We recently upgraded our SAP HR from 600(SP 48) to 600(SP61) and EA HR component from 603(SP 22) to 603( SP 35).
After the upgrade we came to know that the portal users are facing some issues with Etime application on portal, i did a bit of searching and found that we have to upgrade SAP ESS, MSS and ERP5COM components. (http://wiki.sdn.sap.com/wiki/display/ERPHCM/HOWTOGETRIDOFSPSTACKMISMATCHISSUES)
My questions are:
1) Can we directly apply SP's for ESS, MSS and other components as i cannot find any prerequisites required to be met before they have to applied?
2)If we have ESS SP 04 and the required version is ESS SP07, can we directly apply SP 07 or we have to first apply in a sequence SP05, SP06 and then move to SP07?
Thanks a lot!
Varun

Hello,
1) If a developer modified the ESS/MSS package, you need to ask the developer before you apply the patches. In this case, you find the "local version is modified" text in the corresponding package.
2) Java Patches are cumulative, which means that higher Patch contains all corrections of lower Patches.([SAP Note 1249886|https://service.sap.com/sap/support/notes/1249886])
Laszlo

Error while upgrading SAP R/3 Enterprise 4.7 to SAP ECC 5.0

Dear SAP,
We are on the process of upgrading SAP R/3 Enterprise 4.7 with Ext:110 to SAP ECC 5.0.But during the VERSCHK_INI phase an error is been thrown showing that
"The start release configuration :
SAP_ABA :620
SAP_APPL :470
SAP_BASIS :620
SAP_HR:470.....is not supported "
At this stage we decided to continue with this by ignoring the VERSCHK_INI phase,but it gave us a warning that to continue with the next phase(TOOLVERSIOn_INI phase) we require a password.
we searched in several documents even in the documents along with the cd but was not able to find a password for this or a solution for the error in phase VERSCHK_INI.
I request team SAP to help us in this regard.Expecting your reply ASAP.
Thanks and Regards
Anantha Raman E.

Were you able to find a resolution to this problem. We are also having a similar problem in our prepare phase and cannot find anything to help us as yet.
Thanks,
Barry Keating

Can i upgrade SAP business One version 8.6 to 9.1

Hi Expert,
Can i upgrade SAP business One version 8.6 to 9.1 directly.please assist me.
Regards,
Mizan

Hi,
There is no 8.6 version for SAP B1. Please advice correct version with PL.
Thanks.

Steps to upgrade SAP B1 8.8 PL10 to 8.81 PL05

Hi All,
Please could someone guide me how to upgrade my system from 8.8 PL10 to 8.81 PL05. I have the downloaded file available with me with a "upgrade" application button. Should I directly click on "upgrade" button in the 8.81 PL05 folder and follow accordingly, or we need to uninstall certain elements of existing 8.8 PL10 version?
Thanking you in advance!!!!
Golden

Hi Golden,
For more information regarding upgrade SAP Business One application to version 8.81 please refer to the "Administrator's Guide 8.81 SQL" (chapter: 5 u2013 Upgrading SAP Business One), which can be found on the Documentation Resource Centre on the Portal.
http://service.sap.com/smb/sbo/documentation -> Documentation Resource Center for Release Family 8.8 -> System Administration
Regards,
Ladislav Meszaros
SAP Business One Forum Team

Encounter a problem during upgrade sap r/3 4.7 to ecc6

Hi expert:
i encounter a problem during upgrade sap r/3 4.7 to ecc6
in START_SHDI_FIRST step.
here is the error msg~
MSSCRESPDEFN.LOG
Msg 2812, Level 16, State 62, Server Jack, Line 6
Could not find stored procedure 'dbo.sap_upg_getrelease'.
setuser
i checked MS SQL DB and found out that i only got 'erp.sap_upg_getrelease' but not dbo owner.
can any one tell me how to solve this problem?~
thanks.
Regards
Jack Lee

It's the kernel for the shadow the correct?.
Regards,
Alfredo.

Upgrade Sap R/3 4.6b to ECC 6.0 -unicode enabling

Hi,
I am going to work Upgrade Sap R/3 4.6b to ECC 6.0
My role only Unicode enabling syntax check.
Can any one explain what are the work involved in
Custom Reports, Custom Transaction and Screens, BDC, Enhancements and Exits(BTE), Script ,Custom DDIC
Particularly need information Sapscript forms
Regards,
Ram

Hi Ram,
For Unicode, transaction UCCHECK is your best friend. It will even tell you how to fix the error.
All programs Most of the time you will just go and set the Unicode Checks Active program attribute, save, activate.
- If there are Unicode errors, fix them.
http://iorboaz.blogspot.com/2008/03/sap-abap-solution-instructions-for.html
SAPScript - Not sure if it even needs Unicode-enabling. We are still in the middle of an upgrade. Will add more later.
Custom DDIC In our case, the BASIS team handled the Unicode conversion of the DDIC objects.I think they ran a consistency check first, then run SPUMG or something.
Search the web for a Combined Upgrade and Unicode Conversion Guide.
Hope this helps.

I upgraded the cloud control panel and now i dont have any of the songs in my itunes library except purchased songs

i recently upgraded the icloud control panel because it popped up and told me there was an upgrade. once the upgrade finished i opened itunes and the only songs that were there were songs that were in the cloud all my previously added music from my cds was gone. i was going to talk to apple support but they want a serial number for the apple product which i dont have because my question is for itunes on my windows laptop.

See this post.
tt2

Upgrade SAP Access Control v5.2 to Access control v5.3 in DS v3

Similar Messages

Maybe you are looking for