CRM Security Experiences

Question: Has anyone had any POSITIVE experience with CRM 4.0 security? Or any SAP CRM security for that matter?

I am finding this to be an absolute nightmare. BSPs not working correctly due to missing security checks, or checks that don't make any sense. Lack of functionality in BSPs, removal of existing functionality in R/3 which now doesn't work in CRM (i.e. Credit release authorization).

So far, this project has been an absolute nightmare, and SAP's few responses to me have been "that is not supported", or "you need consulting". Two of my favorite lines from their support team. In the world of SOX that we live now, I love how they are only worried about the stuff working (which is only 1/2 of the time), let alone how to secure the data from prying eyes or clumsy users...

I think its funny how the development team in Walldorf developed the backend CRM functionality, but the lovely portal piece was developed in CA... lol Whomever was the project manager for this solution should be put on the rack and quartered... grrrr

SAP is like my Philadelphia Eagles... Love them to death, but they drive you nuts sometimes...
_________________
"SOX.. hmm .. Aren't they the baseball teams in Boston and Chicago?"

Kind Regards,

IamEvilHomer

(Wayne)

Answer:
I remember that you had found some empty concept once before and were beaming SAP on it.

What came of it?

Tarr
_________________
Try Search
Else SAPNet
Otherwise It was designed not to work.
____________________

Answer:
Well, they basically told me "it's not available", and to go pound sand. How nice. I love telling the functional people that they need to create custom auth objects and check them via a custom BADI to secure certain key aspects of data (which mind you is already secure in R/3).

Sorry, I feel like i'm alone on an island here and SAP is telling me to make my own boat. All this for a 17% support fee. Go figure.
_________________
"SOX.. hmm .. Aren't they the baseball teams in Boston and Chicago?"

Kind Regards,

IamEvilHomer

(Wayne)

Answer:
I am about to embark on a three part CRM project. I had a feeling it would be as you described. I am not getting warm fuzzies as I look over the documentation, and troll message boards for info.

I am not located very far from you. Perhaps we need to meet at a bar and commiserate.

My experience with some of the newer systems, even things in R/3 that aren't mature, is that they are riddled with issues. Authorization checks not present where needed, or not working as described. EH&S comes to mind as a module we have gotten nowhere with.

We are going to be on 5.0.

Oi!

Answer:
Cool! Send me a PM, and we'll have a beer and *insert female dog nickname* fest about SAP CRM.

I'll tell you not to use the product, and you can pull your hair out!
_________________
"SOX.. hmm .. Aren't they the baseball teams in Boston and Chicago?"

Kind Regards,

IamEvilHomer

(Wayne)

Answer:
Mr. Evil,


I PM'ed ya!

Answer:
I've just completed a CRM project.......and it wasn't much fun.

Top Tips are

Use object PLOG for control of the webclient, infotypes 1260 & 1261.
Ensure there is a sound Org model in place.
Transaction USERS_GEN will create BP's for exisitng users.
Copyright ?2007 - 2008 www.jt77.com