Show TOC

Automatic authorization checks for ABAP/4 key words.

Description

In Release 3.0E, authorization checks are performed automatically for certain ABAP/4 key words, specifically those which can be used to make direct access to operating system ressources. The ABAP/4 key words concerned are:

• OPEN DATASET,

• READ DATASET, TRANSFER, DELETE DATASET

• COMMUNICATION (CPIC calls)

• CALL C function

• CREATE OBJECT (OLE calls)

The new authorization objects created for this purpose are:

• S_DATASET (file accesses from ABAP/4 programs)

• S_CPIC (CPIC calls from ABAP/4 programs)

• S_C_FUNCT (C calls in ABAP/4 programs)

• S_OLE_CALL (OLE calls from ABAP/4 programs)

However, the maintenance of authorizations for these authorization objects is still somewhat restricted, since it is still not possible to specify object names as planned (because the authorization fields are too short).

The authorizations required for the new checks are normally entered in the following profiles:

• SAP_NEW (authorizations for new objects)

• S_A.ADMIN (operator)

• S_A.CPIC (for SAP user SAPCPIC)

• S_A.CUSTOMIZ (Customizing)

• S_A.DEVELOP (developer)

• S_A.SYSTEM (system administrator)

• S_A.USER (user)

System administration changes

You must assign the profile S_A-CPIC to the user SAPCPIC in client 000.