Security Checks in ABAP Release 7.40, SP05 - ABAP Keyword Documentation

ABAP - Keyword Documentation → ABAP - ABAP Release News → News for ABAP Release 7.40 and its SPs → News for ABAP Release 7.40, SP05 →

Mail Feedback

Security Checks in ABAP Release 7.40, SP05

1. Security Tests in the Extended Program Check

2. Documentation of Security Risks

Modification 1

Security Tests in the Extended Program Check

The new security checks in the extended program check scan ABAP programs for security issues. The security checks perform a static analysis of the ABAP source code and report any potential security risks.

The security checks can be executed as follows:

Directly from the extended program check in ABAP Workbench
From Code Inspector
From ABAP Test Cockpit (ATC)

If used from ATC, the checks are integrated into the transport release functions and can be executed from the ABAP development tools for Eclipse (ADT).

The security checks must be purchased as a separate product. Additional licensing costs are incurred if the security checks are used in customer systems. The program RSLIN_SEC_LICENSE_SETUP can be used to provide the security check option in a system. This requires the authorization modify global check variants in ATC.

Modification 2

Documentation of Security Risks

Potential security risks in ABAP programs are documented in the ABAP security notes.