Exam C_SEC_2405 Topic 5 Question 25 Discussion

When you maintain authorization defaults (e.g., adding authorization object S_TABU_DIS with ACTVT value 02 for transaction SM30) and need to transport these changes:
* Changes are Cross-Client and Repository-Based:
* Authorization default changes in SU24 are considered cross-client because they affect all clients in the system.
* These changes are part of the SAP repository and are treated as Workbench requests.
* Save Changes to a Workbench Transport Request:
* Upon saving changes in SU24, the system prompts you to assign them to a transport request.
* Select or create aWorkbench transport requestto capture the changes.
* Use the Transport Management System (TMS):
* Use TMS to transport the Workbench request from the development system to the quality assurance system.
* This ensures that the authorization defaults are consistently applied across systems.
Why Other Options Are Incorrect:
* Option B:Customizing transport requests are client-specific and not suitable for cross-client repository changes.
* Option C:Manually transporting tables USOBT_C and USOBX_C is not recommended and can lead to inconsistencies.
* Option D:SU25 is used for post-upgrade authorization adjustments, not for transporting SU24 changes.
SAP Security References:
* SAP Help Portal:Transporting Authorization Data Changes
* SAP Documentation:Using Workbench Requests for Cross-Client Objects
* SAP Note:Best Practices for Transporting SU24 Authorization Defaults