SAP Library - SAP NetWeaver Application Server ABAP Security Guide

Start Level 1 Node: SAP NetWeaver Application Server ABAP Security Guide

SAP NetWeaver Application Server ABAP Security Guide

End Level 1 Node: SAP NetWeaver Application Server ABAP Security Guide

Start Level 2 Node: User Authentication

User Authentication

End Level 2 Node: User Authentication

Start Level 3 Node: Authentication and Single Sign-On

Authentication and Single Sign-On

End Level 3 Node: Authentication and Single Sign-On

Start Level 4 Node: Logon and Password Security in the ABAP-System

Logon and Password Security in the ABAP-System

End Level 4 Node: Logon and Password Security in the ABAP-System

Start Level 5 Node: Password Rules

End Level 5 Node: Password Rules

Start Level 5 Node: Security Measures Related to Password Rules

Security Measures Related to Password Rules

End Level 5 Node: Security Measures Related to Password Rules

Start Level 5 Node: Password Storage and Transport

Password Storage and Transport

End Level 5 Node: Password Storage and Transport

Profile Parameters for Logon and Password (Login Parameters)

Start Level 4 Node: Secure Network Communications (SNC)

Secure Network Communications (SNC)

End Level 4 Node: Secure Network Communications (SNC)

Start Level 4 Node: Client Certificates

Client Certificates

End Level 4 Node: Client Certificates

Start Level 4 Node: Logon Tickets

End Level 4 Node: Logon Tickets

Start Level 3 Node: User Types

End Level 3 Node: User Types

Start Level 3 Node: Protecting Standard Users

Protecting Standard Users

End Level 3 Node: Protecting Standard Users

Start Level 3 Node: Preventing Unauthorized Logons

Preventing Unauthorized Logons

End Level 3 Node: Preventing Unauthorized Logons

Start Level 3 Node: Recognizing and Preventing Multiple Dialog User Logons

Recognizing and Preventing Multiple Dialog User Logons

End Level 3 Node: Recognizing and Preventing Multiple Dialog User Logons

Start Level 3 Node: Security Measures When Using SAP Shortcuts

Security Measures When Using SAP Shortcuts

End Level 3 Node: Security Measures When Using SAP Shortcuts

Start Level 3 Node: Additional Information on User Authentication

Additional Information on User Authentication

End Level 3 Node: Additional Information on User Authentication

Start Level 2 Node: AS ABAP Authorization Concept

AS ABAP Authorization Concept

End Level 2 Node: AS ABAP Authorization Concept

Start Level 3 Node: Overview

End Level 3 Node: Overview

Start Level 3 Node: Organizing Authorization Administration

Organizing Authorization Administration

End Level 3 Node: Organizing Authorization Administration

Organization if You Are Using the Profile Generator

Start Level 5 Node: Setting Up User and Authorization Administrators

Setting Up User and Authorization Administrators

End Level 5 Node: Setting Up User and Authorization Administrators

Start Level 5 Node: Setting Up the Role Administration Tool

Setting Up the Role Administration Tool

End Level 5 Node: Setting Up the Role Administration Tool

Start Level 5 Node: Authorization Objects Checked in Role Administration

Authorization Objects Checked in Role Administration

End Level 5 Node: Authorization Objects Checked in Role Administration

Organization without the Profile Generator

Start Level 5 Node: Creating and Maintaining Authorizations/Profiles Manually

Creating and Maintaining Authorizations/Profiles Manually

End Level 5 Node: Creating and Maintaining Authorizations/Profiles Manually

Start Level 3 Node: Authorization Checks

Authorization Checks

End Level 3 Node: Authorization Checks

Start Level 4 Node: Defining the Scope of Authorization Checks

Defining the Scope of Authorization Checks

End Level 4 Node: Defining the Scope of Authorization Checks

Start Level 5 Node: Searching for Deactivated Authority Checks

Searching for Deactivated Authority Checks

End Level 5 Node: Searching for Deactivated Authority Checks

Start Level 4 Node: Globally Deactivating Authorization Checks

Globally Deactivating Authorization Checks

End Level 4 Node: Globally Deactivating Authorization Checks

Start Level 3 Node: Protective Measures for Special Authorization Objects

Protective Measures for Special Authorization Objects

End Level 3 Node: Protective Measures for Special Authorization Objects

Start Level 4 Node: Generated Role SAP_NEW

Generated Role SAP_NEW

End Level 4 Node: Generated Role SAP_NEW

Authorization Profile SAP_ALL

Start Level 3 Node: User Information System

User Information System

End Level 3 Node: User Information System

Start Level 3 Node: Central User Administration

Central User Administration

End Level 3 Node: Central User Administration

Start Level 4 Node: Security Aspects of the CUA

Security Aspects of the CUA

End Level 4 Node: Security Aspects of the CUA

Start Level 3 Node: Additional Information About the SAP Authorization Concept

Additional Information About the SAP Authorization Concept

End Level 3 Node: Additional Information About the SAP Authorization Concept

Start Level 2 Node: Network Security for SAP NetWeaver AS ABAP

Network Security for SAP NetWeaver AS ABAP

End Level 2 Node: Network Security for SAP NetWeaver AS ABAP

Start Level 3 Node: AS ABAP Ports

End Level 3 Node: AS ABAP Ports

Start Level 2 Node: Security Aspects for the Change and Transport System

Security Aspects for the Change and Transport System

End Level 2 Node: Security Aspects for the Change and Transport System

Start Level 3 Node: Technical System Landscape for CTS

Technical System Landscape for CTS

End Level 3 Node: Technical System Landscape for CTS

Start Level 4 Node: Securing the Transport Directory

Securing the Transport Directory

End Level 4 Node: Securing the Transport Directory

Start Level 3 Node: CTS User Administration and Authentication

CTS User Administration and Authentication

End Level 3 Node: CTS User Administration and Authentication

Start Level 3 Node: CTS Roles and Authorizations

CTS Roles and Authorizations

End Level 3 Node: CTS Roles and Authorizations

Start Level 3 Node: CTS Network and Communication Security

CTS Network and Communication Security

End Level 3 Node: CTS Network and Communication Security

Start Level 4 Node: CTS Communication Destinations

CTS Communication Destinations

End Level 4 Node: CTS Communication Destinations

Start Level 4 Node: Scenarios for CTS RFC Communication

Scenarios for CTS RFC Communication

End Level 4 Node: Scenarios for CTS RFC Communication

Start Level 3 Node: Security Aspects of CTS Data, Data Flow, and Processes

Security Aspects of CTS Data, Data Flow, and Processes

End Level 3 Node: Security Aspects of CTS Data, Data Flow, and Processes

Start Level 4 Node: Defining the Transport Process

Defining the Transport Process

End Level 4 Node: Defining the Transport Process

Start Level 4 Node: Securing Production Operation

Securing Production Operation

End Level 4 Node: Securing Production Operation

Start Level 3 Node: Monitoring Transport Activities

Monitoring Transport Activities

End Level 3 Node: Monitoring Transport Activities

Start Level 2 Node: Web Dynpro ABAP Security Guide

Web Dynpro ABAP Security Guide

End Level 2 Node: Web Dynpro ABAP Security Guide

Start Level 2 Node: eCATT Security Guide

eCATT Security Guide

End Level 2 Node: eCATT Security Guide

Start Level 3 Node: Before You Start

Before You Start

End Level 3 Node: Before You Start

Start Level 3 Node: Technical System Landscape

Technical System Landscape

End Level 3 Node: Technical System Landscape

Start Level 3 Node: Authorizations

End Level 3 Node: Authorizations

Start Level 4 Node: Authorization Objects Used in eCATT Authorization

Authorization Objects Used in eCATT Authorization

End Level 4 Node: Authorization Objects Used in eCATT Authorization

Start Level 4 Node: Test Developer Authorizations

Test Developer Authorizations

End Level 4 Node: Test Developer Authorizations

Start Level 4 Node: Tester Authorizations

Tester Authorizations

End Level 4 Node: Tester Authorizations

Start Level 4 Node: Test Administrator Authorizations

Test Administrator Authorizations

End Level 4 Node: Test Administrator Authorizations

Start Level 4 Node: Setting up authorizations when execution is done locally

Setting up authorizations when execution is done locally

End Level 4 Node: Setting up authorizations when execution is done locally

Start Level 3 Node: Network and Communication Security

Network and Communication Security

End Level 3 Node: Network and Communication Security

Start Level 3 Node: Security for eCATT Log Administration

Security for eCATT Log Administration

End Level 3 Node: Security for eCATT Log Administration

Start Level 3 Node: Security for Web Dynpro Testing

Security for Web Dynpro Testing

End Level 3 Node: Security for Web Dynpro Testing

Start Level 3 Node: Security for External Tool Integration

Security for External Tool Integration

End Level 3 Node: Security for External Tool Integration

Start Level 3 Node: Security for the Use of SAP GUI Scripting

Security for the Use of SAP GUI Scripting

End Level 3 Node: Security for the Use of SAP GUI Scripting

Start Level 2 Node: Security Guide for Embedded Search

Security Guide for Embedded Search

End Level 2 Node: Security Guide for Embedded Search

Start Level 3 Node: User Administration and Authentication

User Administration and Authentication

End Level 3 Node: User Administration and Authentication

Start Level 4 Node: User Management

User Management

End Level 4 Node: User Management

Start Level 3 Node: Authorizations

End Level 3 Node: Authorizations

Start Level 3 Node: Network and Communications Security

Network and Communications Security

End Level 3 Node: Network and Communications Security

Start Level 4 Node: Security of the Communications Channels

Security of the Communications Channels

End Level 4 Node: Security of the Communications Channels

Start Level 4 Node: Communication Destinations

Communication Destinations

End Level 4 Node: Communication Destinations

Start Level 3 Node: Data Storage Security

Data Storage Security

End Level 3 Node: Data Storage Security

Start Level 2 Node: Security Aspects When Using Business Objects

Security Aspects When Using Business Objects

End Level 2 Node: Security Aspects When Using Business Objects

Start Level 3 Node: SAP Business Partner Security

SAP Business Partner Security

End Level 3 Node: SAP Business Partner Security

Start Level 3 Node: SAP Product Security

SAP Product Security

End Level 3 Node: SAP Product Security

Start Level 2 Node: Secure Store & Forward Mechanisms (SSF) and Digital Signatures

Secure Store & Forward Mechanisms (SSF) and Digital Signatures

End Level 2 Node: Secure Store & Forward Mechanisms (SSF) and Digital Signatures

Start Level 3 Node: General Information

General Information

End Level 3 Node: General Information

Start Level 3 Node: Protecting Keys

Protecting Keys

End Level 3 Node: Protecting Keys

Start Level 3 Node: Protecting the Application Server’s Keys

Protecting the Application Server’s Keys

End Level 3 Node: Protecting the Application Server’s Keys

Start Level 3 Node: Additional Information on SSF and Digital Signatures

Additional Information on SSF and Digital Signatures

End Level 3 Node: Additional Information on SSF and Digital Signatures

Start Level 2 Node: Special Topics

End Level 2 Node: Special Topics

Start Level 3 Node: Checking User Input for Program Commands

Checking User Input for Program Commands

End Level 3 Node: Checking User Input for Program Commands

Start Level 3 Node: Logical Operating System Commands

Logical Operating System Commands

End Level 3 Node: Logical Operating System Commands

Start Level 4 Node: Restrict Authorizations for Maintaining External Commands

Restrict Authorizations for Maintaining External Commands

End Level 4 Node: Restrict Authorizations for Maintaining External Commands

Start Level 4 Node: Restrict Authorizations for Executing External Commands

Restrict Authorizations for Executing External Commands

End Level 4 Node: Restrict Authorizations for Executing External Commands

Start Level 4 Node: Additional Information on Logical Operating System Commands

Additional Information on Logical Operating System Commands

End Level 4 Node: Additional Information on Logical Operating System Commands

Start Level 3 Node: Protecting Access to the File System Using Logical Path and File

Protecting Access to the File System Using Logical Path and File

End Level 3 Node: Protecting Access to the File System Using Logical Path and File

Start Level 3 Node: Batch Input

End Level 3 Node: Batch Input

Start Level 4 Node: An Overview of the Batch Input Process

An Overview of the Batch Input Process

End Level 4 Node: An Overview of the Batch Input Process

Start Level 4 Node: Protecting the Batch Input Sessions

Protecting the Batch Input Sessions

End Level 4 Node: Protecting the Batch Input Sessions

Start Level 3 Node: HTTP Session Security Protection

HTTP Session Security Protection

End Level 3 Node: HTTP Session Security Protection

Start Level 3 Node: Protecting Disclosure of the SAPconnect RFC User

Protecting Disclosure of the SAPconnect RFC User

End Level 3 Node: Protecting Disclosure of the SAPconnect RFC User

Start Level 3 Node: Preventing or Logging List Downloads

Preventing or Logging List Downloads

End Level 3 Node: Preventing or Logging List Downloads

Start Level 3 Node: Internet Graphics Service Security

Internet Graphics Service Security

End Level 3 Node: Internet Graphics Service Security