on 08-19-2014 5:58 AM
Hi all
We are using ZMCR (Change Request) in CRM Web Client UI (Solution Manager 7.1).
We have a security related issue that we are trying to figure out.
Basically, the REQUESTOR is creating a Change Request (ZMCR). The Requestor, in this case, has SAP_ALL and SAP_NEW. The CR submits OK with no errors.
The APPROVER then comes along and APPROVES the CR. The CR approves OK with no errors.
Obviously we don't want Requestor having SAP_ALL and SAP_NEW...so these profiles are removed and the Requestor performs the same actions:
The REQUESTOR creates a Change Request (ZMCR). The Requestor, in this case does NOT have SAP_ALL and SAP_NEW but just their generic Requestor security roles. The CR submits OK with no errors.
The APPROVER then comes along and APPROVES the CR. The CR DOES update to Approved status, however the error "Current IBase component is not in an active IBase" appears. Because of this error, the CR cannot be handed over to Development.
You can see the error in the screenshot above. As you can see, the status has changed to Approved, even though the error appears. This is definitely security related as providing SAP_ALL and SAP_NEW to the Requestor fixes the issue when the Approver approves.
I can't figure out what security is needed. Please assist!!!!!
Thanks
Shaun
Hi everyone
I apologise because this turned out to be pretty simple!!!
As I thought, it was definitely security related. SAP_SOCM_REQUESTOR, for some reason, had some auth objects not generated within the role. I made these active and regenerated the role...and it works.
Thanks for everyones replies and sorry for something so simple!!!!!
Cheers
Shaun
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello Shaun,
Have yuo checked note 1907494 - Current IBase component is not in an active IBase - Solution Manager 7.x ?
Also run IB52 provide installed base - 1, component no 3792 then go to installation -> functions -> activate <-> deactivate and check if deactivate funciont could be set.
BR,
K.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Shaun,
Make sure you generated correct Ibase for target system (Example- QR3 CLIENT 600). Check in managed system setup for system QR3 600 and re- try it.
*The Installed Base for all systems/clients assigned to the Logical Component (which is assigned to your Project) should exist. Please try to generate the IBase to all clients, review your Logical Component and try it
Thanks
Sateesh.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Shaun,
which role is assigned to Requester and Approver.?
Assign the below composite role and check it.
SAP_CM_REQUESTER_COMP - Requester
SAP_CM_CHANGE_MANAGER_COMP - Approver
Rg,
Karthik
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
83 | |
23 | |
11 | |
9 | |
8 | |
5 | |
5 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.