IT Security
SP02 Output controller: overview of spool requests
To configure the SAL, please use transaction RSAU_CONFIG (formerly SM19) as of SAP Release 7.50. It is recommended to activate the cross-user logging with minimum settings and to record all audit classes for users with extensive authorizations, such as SAP standard and emergency users. These settings should always be configured on a cross-client basis.
Transporting transport orders from one system line to another or importing third-party transport orders into the SAP system is also an occasional task for an SAP basis administrator. As in my last blog post on system modifiability, I would like to offer you a way to quickly present this topic. So you will find a step-by-step guide which you can follow if you have already understood the content of the topic, but only the steps need to be taken. What are the requirements? Transport orders include two files, titled "data" and "cofiles". These files consist of a six-character alphanumeric combination and a file extension, which often represents the system from which the files were exported. The first character is always a K (the cofiles file) or an R (the data file). For our example we call the files K12345_DEV and R12345_DEV. These files are of course needed for an import into your own SAP system. Furthermore, you need access to the file system or the SAP directories, as they have to insert the above files there manually. In addition, the transaction STMS is required in the SAP system because it attaches the transport orders to the import queue. Now, if you have all of this available, we can start with the import: What is the procedure? Operating System Level Preparation. The first step is to copy the files to the transport directory of the SAP system. This is usually below /usr/sap/trans, but can be changed individually depending on the system. If you want to make sure that you are working in the correct directory, you can look in the transaction AL11 to see which directory is specified under "DIR_TRANS". This is the right directory to work on. Here the existing files are copied into it, namely the cofiles file (K12345_DEV) in the cofiles folder (/usr/sap/trans/cofiles) and the data file (R12345_DEV) in the data folder (/usr/sap/trans/data). Note: In this case, especially for companies with multiple systems on multiple servers, the access permissions and the file owner need to be changed so that the import in the target system does not cause problems.
Database export / import
In order for the stored business logic of an application to be executed correctly, the executing user must also have the necessary permission objects in the flow logic of the OData services in his role. If Authority Checks are performed here, e.g. to query or change data on the backend server, the corresponding role must be authorised. These permissions are expressed in a role by permission objects, as in any ABAP report. If you follow these steps, your Launchpad users should have the Fiori permissions necessary to launch the launchpad, view all relevant tiles, and run the specific apps with their business logic.
Once you have met all the requirements described above, you can begin to prepare your system for processing digitally signed notes. To do this, the SAP Note with the number 2408073 must be recorded. This consists of a few steps for manual preparation, some automatically executable activities, and steps to rework the note. It is recommended not to change the file name after downloading. Note 2408073 has a file extension of "sar" and will first be unpacked with SAPCAR. There is a zip archive in it. The text file in it can be loaded into the Note Assistant with the SNOTE transaction via the Note upload. Once you have completed these steps, you can begin to install the note. The steps are detailed in the note itself and in a document attached to the note. Therefore, only a few points that need to be considered are highlighted below. When creating and clicking on Save the "CWBDS" object, a message may appear prompting you to select an object from the permitted namespace. Here the cursor can be placed in the object field and confirmed with Enter, then the query is made after a transport order. When creating the message texts in the "SCWN" message class, it is normal that after saving the changes several times (as many times as messages have been created) the question about the transport order must be confirmed. In addition, when creating the message texts, it should be noted that the texts provided in the tutorial attached to the note are available in English. If you are working on a German system, you should translate the texts into the German language when inserting them. The English texts can then be inserted as translations in the same window. To do this, select "Jump -> Translate". Conclusion It is a popular approach among hackers to use updates that are usually intended to fix bugs or increase security to inject malicious code into the system.
Tools such as "Shortcut for SAP Systems" complement missing functions in the SAP basis area.
On www.sap-corner.de you will also find useful information about SAP basis.
It can be used with SNC without any further configuration.
If you want to jump directly to a step-by-step guide, just scroll down to the bottom, where I summarised everything once.