Industry Solution Migration Workbench Authorization check, SAP security note 1362972

SAP security note 1362972, “Industry Solution Migration Workbench: Authorization check”, is a program error note released on 30.10.2009. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

The IS Migration Workbench has an insufficient authorization check.

Solution

In addition, we provided this program with the developer authorization check (authorization object S_DEVELOP, object type PROG).

Import the relevant Support Package, or implement the attached correction instructions. We recommend that you implement this note to correct this security flaw.

Reason and prerequisites

You can use the IS Migration Workbench to create or change program parts of the generated load report using the ABAP Editor if you are authorized to use the IS Migration Workbench in change mode (authorization object F_KKMIGRAT).

References

• Automatic checks for security notes using RSECNOTE (outdated)
• Collective Security Note

Affected components

• IS-U/CCS: Versions 464 to 471
• FI-CA: Versions 472 to 604