SAP Note 13202 - Security aspects in ABAP programming

Component : Syntax, Compiler, Runtime - Security

Solution : https://service.sap.com/sap/support/notes/13202 (SAP Service marketplace login required)

Summary :
The SAP Note discusses the challenge of securing critical system data during ABAP development. It notes that all database tables, including sensitive ones like HR and accounting data, can be accessed and modified in an ABAP program. SAP currently does not support using the system concurrently for production and development while ensuring security. Recommendations include restricting development authorization in production systems, implementing a temporary authorization process for urgent fixes, and conducting development in separate systems with thorough transport procedures. The Code Inspector tool in Release 6.20 assists with security checks, and specific authorization objects control sensitive operations like C calls and file operations.

Key words :
create object object class, temporarily granted se38 authorization, 0e authorization objects exist, protect critical system data, change critical data, symptom key word, includes hr information, user master records, development environment objects, cross reference lists

Related Notes :

1261193
710202FPDKCPR - Maintaining authorization for Denmark CPR Number
65968ABAP debugging authorizations
23611
1201SAP-SQL for all clients