SAP SAP Security istration By Sravan
SAP Advanced Troubleshooting
ST01 is one of the primary tools in the SAP security ’s tool bag. ST01 gives us a peek inside the running ABAP program to reveal the SAP authorization concept in action by capturing the ABAP code executing the authority check against specific authorization objects. Although the security uses ST01 for analyzing the authorizations needed for a given transaction, ST01 is not just for authorization traces If you don’t know by now, the SAP authorization concept is implemented in SAP within the APAP code that executes behind every transaction code. The ABAP code looks at the authorization values that have been set for an individual by way of the role(s) that have been assigned to the master record And then it compares those values to the values the program designer expects to validate, whether the is authorized to run this program.
SAP Advanced Troubleshooting
ST01 (System Trace) used to recode the internal SAP system activities. Main usage: The system trace is primarily used when, one want to trace the authorization issues and analyze them. Apart from the authorization issues ST01 also provides the following features: Kernel functions Kernel module Database accesses (SQL trace) Table buffers RFC calls Lock operations (client side) Note: The last 4 components can also be monitored using Performance Analysis (transaction ST05). Click here to see how ST01 is used to find missing authorizations
SAP Advanced Troubleshooting
Step 1 : Type ST01 tcode and execute
SAP Advanced Troubleshooting
Step 2: Click Edit->filter-Shared to include for whom the trace is happening
SAP Advanced Troubleshooting
Step 3: Type the name and then click right button to execute
SAP Advanced Troubleshooting
Tick the Authorization check as we are only tracing authorization check
SAP Advanced Troubleshooting
Step 5 : Switch on trace Note : Once trace is turned on, ask the to and perform the activity for which authorization check need to be traced
SAP Advanced Troubleshooting Step : Start analyzing the trace
SAP Advanced Troubleshooting
IF Return Code (RC=0) “0” indicates the authorization was successful. Return Code (RC=4 or other than 0) “4” indicates the authorization was unsuccessful
SAP Advanced Troubleshooting
IF Return Code (RC=4 or other than 0) “4” indicates the authorization was unsuccessful ST01 code Description 0 Auth check ed 1 No authorization 2 Too many parameters for auth check 3 Object not contained in buffer 4 No profile contained in buffer 6 Authorization check incorrect 7,8,9 Invalid buffer