Security Aspects for the Change and Transport System
The Change and Transport System (CTS) is a tool that helps you to organize development projects in the ABAP Workbench and in customizing, and then transport the changes between the SAP systems in your system landscape. You can also use it to transport objects of non-ABAP applications through your system landscape.
The Change and Transport System is part of SAP NetWeaver AS for ABAP. Therefore, all security recommendations covered in the Security Guide for SAP NetWeaver AS for ABAP also apply to the Change and Transport System. This section of the security guide provides an overview of the security-relevant information that applies to the Change and Transport System.
- Technical System Landscape for CTS
This section provides an overview of the technical components and communication paths that are used by the CTS.
- CTS User Administration and Authentication
This section provides an overview of the following user administration and authentication aspects:
- Recommended tools for user management
- Standard users that are delivered with CTS
- CTS Roles and Authorizations
This section provides an overview of the authorization concept that applies to CTS.
- CTS Network and Communication Security
This section provides an overview of the communication paths used by CTS and the security mechanisms that apply.
- Security Aspects of CTS Data, Data Flow, and Processes
This section provides an overview of security aspects involved throughout the most widely-used processes within CTS.
- Monitoring Transport Activities
This section provides an overview of the options you have to monitor transport activities.
Important SAP Notes
The most important SAP Notes that apply to the security of Change and Transport System are shown in the table below.
| Title | SAP Note | Comment |
|---|---|---|
| Changing TMSADM password is too complex. | 1414256 ![]() |
Changing the TMSADM password was made easier. |
| Update #1 to Security Note 1414256 | 1515926 ![]() |
SNC and domain links for changing the TMSADM password are supported as of this note. The note contains correction instructions. |
| Starting tp via gateway | 1371799 ![]() |
If calling the transport control program tp using the gateway poses a security problem in your network environment, you can deny permission for tp to be started this way.
For more information on securing the Gateway, see Security Settings in the Gateway. |
Further Information About Security-Related Information in SAP Library
- Transport Management System - Concept
- Authorization Objects in the CTS
- Setting the System Change Option
- Configuring TMS
For a list of additional security-relevant SAP Security Notes and News, see also SAP Support Portal at http://service.sap.com/securitynotes
.