Question:
Hello Everybody,
did anybody know the logical db Model vor authority issues.
Which tables are affected and how are the tables connected to each other.
In which table are the activities and their values stored and how are they connected to certain users ?
Thanks for your help.
regards
Ralf
Answer:
THere is no logical data base of security...
But fron user to value the real security is:
USR02->USR04->USR10->USR12.
There are other tables as weel that support these surch as:
Tables
ADRSTATUS
V_ADDR_USR
ADRP
ADCP
ADRC
ADR7
AGR_1016
AGR_1250
AGR_1251
AGR_1252
AGR_1253
AGR_AGRS
AGR_AGRS2
AGR_ATTS
AGR_BUFFI
AGR_BUFFI2
AGR_BUFFI3
AGR_CUSTOM
AGR_DATEU
AGR_DEFINE
AGR_FAVOS
AGR_FLAGS
AGR_FLAGSB
AGR_HIER
AGR_HIER2
AGR_HIERT
AGR_HIERT2
AGR_HIERT3
AGR_ICON
AGR_MARK
AGR_MINI
AGR_MINI2
AGR_MINIT
AGR_MINIT2
AGR_NSPCE
AGR_NUMBER
AGR_NUM_2
AGR_POPUP
AGR_POPUP2
AGR_POPUP3
AGR_PROF
AGR_SELECT
AGR_SHIER
AGR_SHIERT
AGR_SMENU
AGR_SPRTXT
AGR_STRING
AGR_STRUC
AGR_TCDTXT
AGR_TCODES
AGR_TCODES_TEXTS
AGR_TEXTS
AGR_TIME
AGR_TIMEB
AGR_TIMEC
AGR_TIMED
AGR_TRAN
AGR_TRANS
AGR_TXT
AGR_USERS
AGR_USERT
APTREE
AUTHA
AUTHABA
AUTHB
AUTHDB2
AUTHHR
ZCUSTAUTH
COACTA
CUS_ACTOBJ
CUS_ACTT
HRT1250
HRT1251
Info types 1252,1253,1016,1001
PRGN_CUST
SMEN_BUFFC
SMEN_BUFFI
SMEN_DATEU
SMENUSENEW
SSM_CUST
START_GUID
T513A
T591A
TACTT
TACTZ
TADIR
TAUTL
TBRG
TCDCOUPLES
TDDAT
TDEVC
TOBCT
TOBJ
TOBJC
TOBJT
TOBJVOR
TOBJVORDAT
TOBJVORFLG
TOBJ_CD
TOBJ_OFF
TOBJ_SAV
TOBJ_TPL
TPGP
TPGPT
TPRPROF
TPRVORDAT
TPR_XREF_D
TRDIR
TSTC
TSTCT
TSTCA
TSTCA_C
TVARUVN
USCOMPANY
USERS_SSM
USGRP
USGRPT
USGRP_USER
USH02
USH04
USH10
USH12
USKRI
USKRIA
USKRIAT
USL04
USLA04
USOBT
USOBT_C
USOBT_CD
USOBT_DUP
USOBX
USOBXFLAGS
USOBX_C
USOBX_CD
USOBX_CHK
USOBX_DUP
USOBX_MOD
USORG
USORG_DB
USOTT
USR01
USR02
USR03
USR04
USR05
USR06
USR07
USR08
USR09
USR10
USR11
USR12
USR13
USR14
USR15
USR16
USR20
USR21
USR22
USR30
USR40
USR41
USRACL
USRACLEXT
USRBF
USRBF2
USRBF3
USREFUSVAR
USREL_US
USREXTID
USREXTIDH
USRFLDSEL
USRFLDT
USRFLDTSEL
USRFLDVAL
USRGETSTRC
USRINKONS
USRLISTPROFILE
USRSYSACT
USRSYSACTT
USRSYSPRF
USRSYSPRFT
USRTREECOL
USRURLPRS
USRURLSVR
USRVIEWCOL
USRVIEWTAB
USR_AUFK
USR_FLAGS
USR_LIST
UST04
UST10C
UST10S
UST12
USVAR
USVART
USVAR_V
V_USERNAME
V_USORG
Answer:
Hy John,
thanks for your help. I have lookes at the tables. At my understanding:
In the Table UST12 all activities of each object are stored.
But i don't understand how the information in this table are connected to the username.
E.G. I can give a user the object s_tabu_dis with aktivity 3 and not 2. How are these diference stored in the tables.
Perhaps somebody can give me an SQL Syntax which gave the same results like the report rsusr002. (Searching users by authority objects and activities.)
Perhaps i understand on this the connection between the tables.
Thanks regards
Ralf
Answer:
UST12 is not an accurate table and varies over time if you do not keep them in sync with USR12. USR12 has the authorization, authorization object and values in it ( as does UST12) Authorizations are grouped in profiles stored in USR10.
THe link is authorizations and values are tied to profiles that are tied to users. USR12 ties to USR10 ties to USR04 and ties to USR02. Usr02 is tied to usr21 tied to ADRP for the name. AGR_1016 ties to USR10 , AGR_1016 ties to AGR_DEFINE and AGR_DEFINE ties to AGR_TEXTS record 0000 for the text description.
You can use the USTxx table and get a similar result. but the usrxx are more accurate.
Answer:
Hy John,
thank you again for your tipps. I understand ehich table follows after the other.
USR12->USR10->USR04->USR02
But i don't know how the tables are connected. I thought that a table must have a unique field (Primary KEY), which can be used in another tabel to connect both. But if i look in the table USR12 i couldn't identifiy the primary key and the connection to USR10.
Perhaps i want to download these tables to access and try to connect each together, which keys to i have to choose in the tables ?
Thanks again for your help.
regards
Ralf
Answer:
Look at the table structure in SE11 OBJCT and AUTH are the keys which link to USR10 values in field AUTHS. In analysing it is better to start with USR10 and decode AUTHS which has the keys to USR12.