Question:
The DEVACCESS table contains the Developer Key and login Id of the developers. The table is used to track the number of developers vs. the number of licenses.
Is there a transaction code or job to delete terminated developers? Does everyone just maintain it with SM31?
Thanks.
Answer:
It is maintained programmatically when a developer first tries to create a program. As far as I know there is no maintenance view of the table or delete program.
There a various schools of thought on whether expired developers shoyuld be removed from the table (with a "roll your own" program). Some think that keeping a history around is helpful and others see opportunities for abuse.
Having said that, anyone who thinks that a developer key is required to create programs is not too up on SAP controls.
_________________
bwSecurity
Answer:
The developer key is not nescesarily required to write abap code but the removal of the records in the table "raises the bar" on SAP security. It is not a cure-all end-all but making it more dificult to "infiltrate" of corrupt your system which is the responsibility of SAP Security.
As a security administrator you will never get a completely secure system simply because the company does not have the money and time to do it. All Security should be RISK based and control implemented commensurate with their cost to control. The best you can do is continualy raise the threshhold. Deleteing the records raises the bar one level higher.