SAP NEWS-740 SP08-SLIN SEC



Get Example source ABAP code based on a different SAP table
  



Security Checks in ABAP Release 7.40, SP08
The security checks in the extended program check were revised as follows in ABAP_RELEASE 7.40, SP08, alongside general improvements in data flow analysis and performance:
ITOC

ABAP_MODIFICATION_NN Use of System Fields

The system fields sy-host, sy-sysid, and sy-mandt in logical expressions can indicate potential back doors, like when using sy-uname, and are now checked accordingly.
It is possible to define additional system fields, for which this check is performed, by implementing BAdI SLIN_BADI_SEC_BACKDOOR.

ABAP_MODIFICATION_NN Security-Relevant Function Modules

The check that ensures that the return code sy-subrc is evaluated when a security-relevant function module (such as AUTHORITY_CHECK_TCODE or FILE_VALIDATE_NAME) is called was revised so that the list of predefined function modules can be expanded using the BAdI SLIN_BADI_SEC_PROCEDURES. The program RSLIN_SEC_DISPLAY_SECREL_PROC displays the full list.

ABAP_MODIFICATION_NN Administration Transaction

The new transaction SLIN_ADMIN is used for the administration of the extended program check and the security checks.