Other Security-Relevant Information

Uploading and Displaying Attachments

Uploading Attachments

Talent Management uses the virus scan interface of SAP NetWeaver. You can use this interface to include external virus scanners to increase the security of your system.

For Talent Management, the virus scan profile /HCM_TMC/DOCUMENT_UPLOAD is available for checking that files or documents uploaded as attachments do not contain any viruses. This virus scan profile is not active in the standard SAP system. To activate the virus scan profile, in Customizing for Talent Management and Talent Development, make the settings under Start of the navigation path Basic Settings Next navigation step Attachments Next navigation step Define Virus Scan Profiles End of the navigation path. In Customizing for SAP NetWeaver under Start of the navigation path Application Server Next navigation step System Administration Next navigation step Virus Scan Interface End of the navigation path, you need to first set up the virus scan interface.

For more information about the virus scan interface, see SAP NetWeaver Library and choose Start of the navigation path SAP NetWeaver by Key Capability Next navigation step Security Next navigation step System Security End of the navigation path and the chapter Virus Scan Interface.

You can also limit the size of files that are uploaded as attachments. To do so, in Customizing for Talent Management and Talent Development, make the settings under Start of the navigation path Basic Settings Next navigation step Attachments Next navigation step Assign Storage Locations and Maximum File Size End of the navigation path.

Displaying Attachments Using Microsoft Internet Explorer

If you display attachments in a browser and use Microsoft Internet Explorer for this, Microsoft Internet Explorer checks the content of the attachment to determine the file type and display the attachment correctly based on the type (MIME Type Sniffing). In the worst case, it is thus possible that damaging files of an undesired file type are displayed in the browser or cause damage in another way. To avoid this potential threat to security, deselect MIME Type Sniffing in the security settings of Microsoft Internet Explorer.