RMA Security standard is not implemented, SAP security note 1437224

SAP security note 1437224, "RMA: Security standard is not implemented", is a note. Below are the symptom and SAP recommended solution.

Description

Symptom

Unauthorized users can view original documents in SAP ERP via the RMA Audit Trail without proper authorization checks.

Sensitive information may be exposed, leading to potential data breaches and compliance issues.

Solution

The issue is addressed in EA-RETAIL 6.04 Support Package 6. To implement an immediate fix, follow these correction instructions:

• Create Function Modules: WRMA_ACCOUNT_DOC_DISP (Function Group WRMA_DOCU_DISPLAY; Parameters: I_DOC_YEAR (WRMA_DE_DOC_YEAR) – Pass Value, I_COMP_CODE (BUKRS) – Pass Value, I_DOC_NUM (WRMA_DE_DOC_NUMBER) – Pass Value) and WRMA_INVOICE_VERIFICATION_DISP (Function Group WRMA_DOCU_DISPLAY; Parameters: I_DOC_YEAR (WRMA_DE_DOC_YEAR) – Pass Value, I_DOC_NUM (WRMA_DE_DOC_NUMBER) – Pass Value).
• Activate Function Modules: save and activate both function modules using transaction SE37 or via the SAP menu path Tools – ABAP Workbench – Development – SE37 – Function Builder.
• Apply Correction Instructions: implement the relevant correction instructions as provided in the support packages.

Reason and prerequisites

A program error causes the absence of authorization checks in the relevant document transactions.